event log monitoring on alpha 12

[mconigliaro]

i saw this in the changelog today for alpha12:

"support of monitoring of W32 Event Logs: eventlog[Applications/Security/System] (Alexei)"

i tried adding the "eventlog[Security]" key on one of my windows hosts, but i got a "Not supported by ZABBIX agent" error, even though i installed the windows agent that came with alpha12.

has anyone gotten this to work?

[Alexei]

Check the following:

1. Eventlog[Security] is defined as an active check
2. It has Type of Information "Log"

[Alexei]

ok, ive done this. so far, i only get a "Not supported by ZABBIX agent" error.

It is impossible! Please, define eventlog[Security] as active check, i.e. having type "ZABBIX Agent (active)"

[mconigliaro]

ive attached a screenshot of the error.

i was hoping that maybe i forgot to upgrade the agent, but version[zabbix_agent] seems to be returning '1.1alpha12.'

[Alexei]

I see. Ignore this message. ZABBIX server does not clear error message (yet) in case of recovery. Will be fixed.

[mconigliaro]

well, there might be something else going on. i see new events in the windows event log, but they're not getting into zabbix for whatever reason. when i look at the 'latest data' section for this server, i dont see any data for this check.

[bing]

event logs

im not getting any errors but no new events are being recorded in zabbix.

[kyi]

any suggestions how to fix this problem?
my system reports no errors, but no data is collected.

maybe the next alpha will bring the solution ....

[bing]

event log

Dude - i think i had the same problem. When ever the agent ran it would kill the trapper process, and take down the server. The item in the configuration where it has "Eventlog[System]" is case sensitive. Whenever I ahd the capital E on Eventlog it would crash, change them all to eventlog and it stopped crashing. Start zabbix with 20 process's so you can see lots of them, run a ps -A, and when you start the agent it kills them.

Also make sure you get the latest agent, theres a problem with the one that shipped with alpha12, when it checked the system log it would crash on the agent side. www.zabbix.com/downloads

Hope this helps.