Find out which user restarted the windows server by the zabbix agent??

[KieuPhong]

Good afternoon guys

I would like to know of a tutorial explaining how I discovered the user who restarted a windows server by zabbix and send an email to the network administrators.

I know I have create an item and a correct action?

Thank you all

KieuPhong

[1berto]

I don't know if there is a 'default' way to check it, but you can use system.uptime to detect when the system is restarted and then use system.run[ command ] where command is the command used to get the user that restarted the host.