PDA

View Full Version : event log monitoring on alpha 12


mconigliaro
12-08-2005, 23:42
i saw this in the changelog today for alpha12:

"support of monitoring of W32 Event Logs: eventlog[Applications/Security/System] (Alexei)"

i tried adding the "eventlog[Security]" key on one of my windows hosts, but i got a "Not supported by ZABBIX agent" error, even though i installed the windows agent that came with alpha12.

has anyone gotten this to work?

Alexei
13-08-2005, 20:35
Check the following:

1. Eventlog[Security] is defined as an active check
2. It has Type of Information "Log"

mconigliaro
15-08-2005, 15:44
ok, ive done this. so far, i only get a "Not supported by ZABBIX agent" error.

Alexei
15-08-2005, 16:04
ok, ive done this. so far, i only get a "Not supported by ZABBIX agent" error.
It is impossible! Please, define eventlog[Security] as active check, i.e. having type "ZABBIX Agent (active)"

mconigliaro
15-08-2005, 17:30
ive attached a screenshot of the error.

i was hoping that maybe i forgot to upgrade the agent, but version[zabbix_agent] seems to be returning '1.1alpha12.'

Alexei
15-08-2005, 17:48
I see. Ignore this message. ZABBIX server does not clear error message (yet) in case of recovery. Will be fixed.

mconigliaro
15-08-2005, 19:32
well, there might be something else going on. i see new events in the windows event log, but they're not getting into zabbix for whatever reason. when i look at the 'latest data' section for this server, i dont see any data for this check.

bing
17-08-2005, 11:12
im not getting any errors but no new events are being recorded in zabbix.

kyi
25-08-2005, 08:50
any suggestions how to fix this problem?
my system reports no errors, but no data is collected.

maybe the next alpha will bring the solution ....

bing
30-08-2005, 02:42
Dude - i think i had the same problem. When ever the agent ran it would kill the trapper process, and take down the server. The item in the configuration where it has "Eventlog[System]" is case sensitive. Whenever I ahd the capital E on Eventlog it would crash, change them all to eventlog and it stopped crashing. Start zabbix with 20 process's so you can see lots of them, run a ps -A, and when you start the agent it kills them.

Also make sure you get the latest agent, theres a problem with the one that shipped with alpha12, when it checked the system log it would crash on the agent side. www.zabbix.com/downloads

Hope this helps.