Windows event log monitoring not working with 1.3.2

[dsipe]

Hello,

I've created the same three items [ security, application & System ] on my 1.3.2 test server as the one that worked on 1.1.5.

The items still keep blank, with not date for last check...

Any ideas?

[Alexei]

Thanks for reporting this.

[vadim]

Few notices

Hello!
I have noticed that zabbix_agent(both 1.1.6 and 1.3.2 version) win32 eventlog[...etc...] works on Windows XP and not works on Windows 2003.
Why?

[vadim]

Hello Alexei!

Could you tell me what versions of windows are supports by w32 agent.
With all 1.1.6, 1.3.2 and 1.3.3 versions i cant use eventlog on windows2000.
Any suggestions?

[Alexei]

It does support all versions of Windows starting from Windows 2000. Windows 2000 requires a DLL which can be downloaded from Windows WEB site. Please search documentation or this forum for more information and exact name of the DLL.

[vadim]

Thanks, Alexei.

But i have that pdh.dll on win2000 system and eventlog still blank.
Ai also use ZabbixAgent(Active) in item options because with ZabbixAgent
(without "Active") i get : "Not supported".
May be i dont know something else ...

[vadim]

Maybe i doing something wrong?
I choose "Create item":
Description=eventlog
Type=Zabbix Agent (Active)
Key=eventlog[System]
Type of information=Log
Update Interval=30sec
After saving i see ...nothing
host is windows2003
Agent versin=1.3.3

[Alexei]

Please use agent 1.1.6 for your tests. Also make sure that Server=IP is set correctly in your zabbix_agentd.conf on Windows side.

[vadim]

Yes, I use agent v1.1.6 because agent v1.3.3 couldn't start.
When i change key from "eventlog[System]" to "Eventlog[System]" or to "eventlog[]"
i see no reaction in history and in server log (debug=4).
That's with server 1.3.3.
With version 1.1.6 server was react very fast.
Settings in zabbix_agentd.conf are ok, i can see results for item "system.cpu.load.avg5" well.
Smothing wrong exactly with eventlog.

[Alexei]

Settings in zabbix_agentd.conf are ok, i can see results for item "system.cpu.load.avg5" well.

Is the system.cpu.load configured as ZABBIX Agent (Activce)? If not, it doesn't prove anything.

[vadim]

Yes, Type is "ZABBIX agent (active)".
That change nothing

[Alexei]

Hmm, I'm running out of ideas...

[vadim]

Hello, Alexei.

Maybe that help: i had started win32 agent in "standalone" mode.
Right now item sys.cpu.load.[,avg5] works well and eventlog[System] does nothing.

When i starting zabbix_server(v 1.3.3) with DebugLevel=4 i can see that all items except eventlog are send data.

[vadim]

And one more thing

When i try to execute following:
ZabbixW32.exe --config c:\zabbix\zabbix_agentd.conf test eventlog[System]
i get:
eventlog[System] [ZBX_NOTSUPPORTED]
or when i use zabbix_get on server:
zabbix_get -s host1 -k 'eventlog[System]'
i get once again :
ZBX_NOTSUPPORTED
Who knows, what does it mean?

[bbrendon]

When i try to execute following:
ZabbixW32.exe --config c:\zabbix\zabbix_agentd.conf test eventlog[System]
i get:
eventlog[System] [ZBX_NOTSUPPORTED]
or when i use zabbix_get on server:
zabbix_get -s host1 -k 'eventlog[System]'
i get once again :
ZBX_NOTSUPPORTED
Who knows, what does it mean?

Hmm, using which agent? the 1.1.6 or beta 1.3? I think you might get notsupported because its not something that is one value.

I can vouch that agents 1.1.4 had a few bugs with eventlogs, but since about 1.1.6, everything has been working much better for us. We're also on 1.1.6 server.