Windows eventlog trigger with eventid

[Bert ter Beest]

Windows event logging has been talked about a lot, but I cant seem to find what I am looking for.

I want to make a trigger on an Windows eventlog item but I cant seem to figure out how to integrate the eventID into it.

I have item: eventlog[Application,,,"Backup Manager",,]

Which neatly logs all the events I want. I need a trigger on that one that enables when the eventID is 102 for example (failed backup). I cant do this with severity because they are all logged as "Informational" events within Windows.

If I understand correctly the trigger wil reset itself after recieving new data in the item, if not I'd like the trigger to reset itself after 20 hours.

Can someone point me in the right direction?

I am using Zabbix 1.8.10

[HullZabbix]

You can't have searched very hard :P


some info here:

http://www.zabbix.com/forum/showthread.php?t=23402&page=2

you want something a long the lines of
{template:eventlog[Application].logeventid(102)}=1