when setting up event log monitoring on windows servers, i noticed two things that i think could be improved:
1. when viewing a windows event log, the time range slider adjusts the event range based on the "timestamp" (when zabbix received the data) instead of the "local time" (the eventlog's actual timestamp).
This creates a problem when you add monitoring to a windows host that has been up for a while and already has a larger eventlog. initially, It will generate a HUGE page that takes more than a minute to load in my browser when you try to view the first hour of data.
I'd like to propose that the timerange slider be changed to filter according to the event's actual timestamp(called "local time") instead of zabbix's timestamp (called "timestamp").
2. The windows security events from my 2003 server machines have multiple lines. these are displayed double-spaced on my 1.8.2 frontend. seems like a waste of space.
3. again with these multi-line events, they dont line up correctly across rows. here is a screenshot. i drew in the line where one event stops and the next begins.
What do you guys think?
1. when viewing a windows event log, the time range slider adjusts the event range based on the "timestamp" (when zabbix received the data) instead of the "local time" (the eventlog's actual timestamp).
This creates a problem when you add monitoring to a windows host that has been up for a while and already has a larger eventlog. initially, It will generate a HUGE page that takes more than a minute to load in my browser when you try to view the first hour of data.
I'd like to propose that the timerange slider be changed to filter according to the event's actual timestamp(called "local time") instead of zabbix's timestamp (called "timestamp").
2. The windows security events from my 2003 server machines have multiple lines. these are displayed double-spaced on my 1.8.2 frontend. seems like a waste of space.
3. again with these multi-line events, they dont line up correctly across rows. here is a screenshot. i drew in the line where one event stops and the next begins.
What do you guys think?
Comment