Utilize the file /etc/passwd and JavaScript preprocessing feature to feed the file into low-level discovery. This will allow us to monitor some files per user profile.
Must have at least version 4.2 because of "JavaScript preprocessing feature" and "Discard unchanged" feature.
It is suggested to run Zabbix agent under the root environment to be able to access anything in each user profile.
AllowRoot=1
Pick up bash history:
logrt[{#PATH}/.bash_history*,,utf8]
Pick up MySQL history:
logrt[{#PATH}/.mysql_history*,,utf8]
Take a backup of .bashrc file. Usefull if you invent your own command alias
vfs.file.contents[{#PATH}/.bashrc,utf8]