Hello everybody!,
It’s just quite difficult to make a good working trigger….
I want to monitor the windows eventlog, but for now some logs are empty.
@ this moment I’ve got some unknown situations. For that I tried many things…
1. Use the information / solution on this page: http://www.zabbix.com/forum/archive/...hp/t-8776.html
2. Trying to send, with the using of a remote command, to send something to the eventlog
3. Making an action on a “UNKNOWN” trigger value.
4. Tried the last(0) and strlen(0) option => The only work with new data. NOT history... is that possible too?
All the options were not working.
Do you have an another option?
My other question: When I monitor the eventlog[application] (for example) and there is no data .. then I’ll see this in the ‘latest data’ screen.
(How) Can I make a trigger with this last(x / empty) value?? If that is possible, then I’ll can make an action to remove this “unknown” triggers..
I’ve also tried to create a trigger:
((({TRIGGER.VALUE}#2)&({host:eventlog[Application].nodata(30)}#1))….
Then create an action with a remote command to create an eventlog item.
But this is working with time… so this is not what I want I guess.. because everytime we getting no data.. the will be active..
Thanks for replying
It’s just quite difficult to make a good working trigger….
I want to monitor the windows eventlog, but for now some logs are empty.
@ this moment I’ve got some unknown situations. For that I tried many things…
1. Use the information / solution on this page: http://www.zabbix.com/forum/archive/...hp/t-8776.html
2. Trying to send, with the using of a remote command, to send something to the eventlog
3. Making an action on a “UNKNOWN” trigger value.
4. Tried the last(0) and strlen(0) option => The only work with new data. NOT history... is that possible too?
All the options were not working.
Do you have an another option?
My other question: When I monitor the eventlog[application] (for example) and there is no data .. then I’ll see this in the ‘latest data’ screen.
(How) Can I make a trigger with this last(x / empty) value?? If that is possible, then I’ll can make an action to remove this “unknown” triggers..
I’ve also tried to create a trigger:
((({TRIGGER.VALUE}#2)&({host:eventlog[Application].nodata(30)}#1))….
Then create an action with a remote command to create an eventlog item.
But this is working with time… so this is not what I want I guess.. because everytime we getting no data.. the will be active..
Thanks for replying