Monitoring Event ID 1221

[meden199]

Is there a possibility to monitor even ID 1221 from the event log.

I would like to have a graph of free space on my exchange server

greetings from Holland

[alixen]

Hi,

According to the documentation, eventid can be specified in eventlog item:

eventlog[name,<regexp>,<severity>,<source>,<eventid>,<maxlines>,<mode>]

(http://www.zabbix.com/documentation/...l/config/items)

Have you tried it ?

Regards,
Alixen

[meden199]

After investing some time in reading and I have made the follwoing item

eventlog[application,logseverity(0)}=1,MSExchangeIS Public Store,1221]

But I think it is not the right one.
The graph says: no data

So I start again with reading and trying.

maybe some advice?

Regards,

Patrick

[alixen]

Hi,

eventlog[application,logseverity(0)}=1,MSExchangeIS Public Store,1221]

But I think it is not the right one.
The graph says: no data

You have to respect argument position by inserting the proper number of commas.

I would try something like:

eventlog[Application,,"Information","MSExchangeIS Public Store",1221]

I don't have a Windows server where I could test it now but my suggestion is based on eventlog example in Zabbix documentation http://www.zabbix.com/documentation/...s#zabbix_agent

Hope this helps
Alixen

[zalex_ua]

Is there a possibility to monitor even ID 1221 from the event log.

I would like to have a graph of free space on my exchange server

As the values "event ID 1221" and "free space on my exchange server" are connected to each other? Event ID 1221 is info message with temporary free virtual space in data store after defragmentation IMHO.

I have Exchange 2007 and see what the event ID 1221. The graph for this you can not build !

Real Value from event ID 1221:
После завершения дефрагментации в сетевом режиме размер базы данных "First Storage Group\Mailbox Database" составил 220 МБ.

In fact, the key can be significantly shortened to:
eventlog[Application,,,,1221]

[meden199]

Thanx for the answers.

Now I know that we can't build the graph I don't have to spend any time to it.

I can start a new zabbix project now

[RodrigoCapurro]

I have the same problem, configure an item in this way: eventlog ["Microsoft-Windows-TaskScheduler / Operational" ,, "Information", "Scrute_FileSAP" ,,,]. Scrute_FileSAP is the name of the scheduled task. MY trigger is configured as follows: {AREPBUE-AP23: eventlog ["Microsoft-Windows-TaskScheduler / Operational" ,, "Information", "Scrute_FileSAP", 201] .str (return code 0.)} = 0. but the zabbix alarm is not executed. I wanted to configure so that each execution of the task in the "Information" state, the alarm is executed but it does not do anything. Could you help me?