Ad Widget

Collapse

Description Macro for Windows event logs

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Zaniwoop
    Senior Member
    • Jan 2010
    • 232

    #1

    Description Macro for Windows event logs

    I am monitoring Windows event logs for errors. I then have an action which sends messages.

    Is there a Macro that I cant find that has the "description" details of the event?
    Attached Files
  • HullZabbix
    Senior Member
    • Feb 2011
    • 104

    #2
    Why are you after a "macro"?

    In your trigger you can put, for example:

    {TemplateServers:eventlog[Application].str("WARNING: There are unsent Messages in ta_Message")}=1 & {TemplateServers:eventlog[Application].nodata(10)}#1


    more info here:

    Comment

    • Zaniwoop
      Senior Member
      • Jan 2010
      • 232

      #3
      I am not trying to create a trigger. I am wanting the text from the description, so that I can put it in a message.

      The description has valuable information which is not static.

      Comment

      • HullZabbix
        Senior Member
        • Feb 2011
        • 104

        #4
        OK.

        If your using an action to send a message then you can use:

        {TRIGGER.NAME}
        Computer: {HOSTNAME}
        EventDate: {EVENT.DATE}
        EventTime: {EVENT.TIME}
        Description: {ITEM.LASTVALUE}


        item.lastvalue will be the text of the error message.

        Comment

        • Zaniwoop
          Senior Member
          • Jan 2010
          • 232

          #5
          that was too obvious

          Thanx, it worked.

          Comment

          • thmix
            Junior Member
            • Mar 2012
            • 5

            #6
            Is there any way to include the Windows Event ID and Source in the message/notification?

            Comment

            • HullZabbix
              Senior Member
              • Feb 2011
              • 104

              #7
              Originally posted by thmix
              Is there any way to include the Windows Event ID and Source in the message/notification?
              Source: {ITEM.LOG.SOURCE}
              EventID: {ITEM.LOG.EVENTID}

              Comment

              Working...