Hello everybody,
I have a problem and I hope someone could help me.
I have an active Zabbix agent item that gets back Windows log:
eventlog[Application,,,"NTBackup",8017]
With that log, I can check whether the backup succeded or not.
Then, I created a trigger which fire if the severity log is equals to 4:
({Sauvegardes:eventlog[Application,,,"NTBackup",8017].logseverity(0)}=4) & ({Sauvegardes:eventlog[Application,,,"NTBackup",8017].nodata(3600)}=0)
The problem is the following:
I don't have this log every day, so if I have one with high severity (4), the trigger will fire, but the following day, It will continue to fire while there is no log.
I would like to link the item with the present date. I have seen different macros like ITEM.LOG.DATE, ITEM.LOG.AGE, etc... but I don't know how can I use them.
Thank you very much
I have a problem and I hope someone could help me.
I have an active Zabbix agent item that gets back Windows log:
eventlog[Application,,,"NTBackup",8017]
With that log, I can check whether the backup succeded or not.
Then, I created a trigger which fire if the severity log is equals to 4:
({Sauvegardes:eventlog[Application,,,"NTBackup",8017].logseverity(0)}=4) & ({Sauvegardes:eventlog[Application,,,"NTBackup",8017].nodata(3600)}=0)
The problem is the following:
I don't have this log every day, so if I have one with high severity (4), the trigger will fire, but the following day, It will continue to fire while there is no log.
I would like to link the item with the present date. I have seen different macros like ITEM.LOG.DATE, ITEM.LOG.AGE, etc... but I don't know how can I use them.
Thank you very much
Comment