View Full Version : Windows event log monitoring not working with 1.3.2
Hello,
I've created the same three items [ security, application & System ] on my 1.3.2 test server as the one that worked on 1.1.5.
The items still keep blank, with not date for last check...
Any ideas?
Thanks for reporting this.
Hello!
I have noticed that zabbix_agent(both 1.1.6 and 1.3.2 version) win32 eventlog[...etc...] works on Windows XP and not works on Windows 2003.
Why?
Hello Alexei!
Could you tell me what versions of windows are supports by w32 agent.
With all 1.1.6, 1.3.2 and 1.3.3 versions i cant use eventlog on windows2000.
Any suggestions?
It does support all versions of Windows starting from Windows 2000. Windows 2000 requires a DLL which can be downloaded from Windows WEB site. Please search documentation or this forum for more information and exact name of the DLL.
Thanks, Alexei.
But i have that pdh.dll on win2000 system and eventlog still blank.
Ai also use ZabbixAgent(Active) in item options because with ZabbixAgent
(without "Active") i get : "Not supported".
May be i dont know something else ...
Maybe i doing something wrong?
I choose "Create item":
Description=eventlog
Type=Zabbix Agent (Active)
Key=eventlog[System]
Type of information=Log
Update Interval=30sec
After saving i see ...nothing
host is windows2003
Agent versin=1.3.3
Please use agent 1.1.6 for your tests. Also make sure that Server=IP is set correctly in your zabbix_agentd.conf on Windows side.
Yes, I use agent v1.1.6 because agent v1.3.3 couldn't start.
When i change key from "eventlog[System]" to "Eventlog[System]" or to "eventlog[]"
i see no reaction in history and in server log (debug=4).
That's with server 1.3.3.
With version 1.1.6 server was react very fast.
Settings in zabbix_agentd.conf are ok, i can see results for item "system.cpu.load.avg5" well.
Smothing wrong exactly with eventlog.
Settings in zabbix_agentd.conf are ok, i can see results for item "system.cpu.load.avg5" well.
Is the system.cpu.load configured as ZABBIX Agent (Activce)? If not, it doesn't prove anything.
Yes, Type is "ZABBIX agent (active)".
That change nothing :(
Hmm, I'm running out of ideas...
Hello, Alexei.
Maybe that help: i had started win32 agent in "standalone" mode.
Right now item sys.cpu.load.[,avg5] works well and eventlog[System] does nothing.
When i starting zabbix_server(v 1.3.3) with DebugLevel=4 i can see that all items except eventlog are send data.
When i try to execute following:
ZabbixW32.exe --config c:\zabbix\zabbix_agentd.conf test eventlog[System]
i get:
eventlog[System] [ZBX_NOTSUPPORTED]
or when i use zabbix_get on server:
zabbix_get -s host1 -k 'eventlog[System]'
i get once again :
ZBX_NOTSUPPORTED
Who knows, what does it mean?
bbrendon
13-03-2007, 21:40
When i try to execute following:
ZabbixW32.exe --config c:\zabbix\zabbix_agentd.conf test eventlog[System]
i get:
eventlog[System] [ZBX_NOTSUPPORTED]
or when i use zabbix_get on server:
zabbix_get -s host1 -k 'eventlog[System]'
i get once again :
ZBX_NOTSUPPORTED
Who knows, what does it mean?
Hmm, using which agent? the 1.1.6 or beta 1.3? I think you might get notsupported because its not something that is one value.
I can vouch that agents 1.1.4 had a few bugs with eventlogs, but since about 1.1.6, everything has been working much better for us. We're also on 1.1.6 server.
Thanks for All!
I have done a server "downgrade"(1.3.3 -> 1.1.6).
And after that almost everything is OK.
Now all eventlog's are works well.
Maybe someone of not-english-speaking had some problem with encoding. I use windows2003 server. In system log all is in english but zabbix have in history strings like:
',,,,, ,,,,,,,,, DHCP-client ,,,,,,,, ,,,,,,,,,,,,,, ,,,,,,,'
ando so on...
Who knows have Zabbix a charset encoder for eventlog?
Regards,
Vadim
Problem was alredy solved!