bobrivers
24-02-2010, 18:41
I'm trying to use windows eventlog monitoring with 1.8.1.
If I specify something like eventlog[System,,Error], it works. But, I would like to filter it. I would like that zabbix could retry just a small set of the errors.
So, I think, this is way zabbix team implemented regex support (eventlog[name<,regexp><,severity><,source><,eventid><,maxlines><,mode>]).
I'm not an expert in regular expression, far from that. I googled and I found lot's of controversy about negate strings. The most common solution that I found is to use something like ^(?!.*bar).*$ (in my case I don't want events related with "printer", so, I created a item:
eventlog[System,^(?!.*printer).*$,Error]
But, this isn't working. Nothing is retrieved.
Does someone has any idea how to do that?
TIA,
Bob
Obs.: this site has good information http://wiki.tcl.tk/989
If I specify something like eventlog[System,,Error], it works. But, I would like to filter it. I would like that zabbix could retry just a small set of the errors.
So, I think, this is way zabbix team implemented regex support (eventlog[name<,regexp><,severity><,source><,eventid><,maxlines><,mode>]).
I'm not an expert in regular expression, far from that. I googled and I found lot's of controversy about negate strings. The most common solution that I found is to use something like ^(?!.*bar).*$ (in my case I don't want events related with "printer", so, I created a item:
eventlog[System,^(?!.*printer).*$,Error]
But, this isn't working. Nothing is retrieved.
Does someone has any idea how to do that?
TIA,
Bob
Obs.: this site has good information http://wiki.tcl.tk/989