Windows event logs trigger

[kovas]

Hi,

I configured to get all system events from one Windows 2008 R2 server every 60s. I see the events in Latest Data.

I also configured trigger to send error logs by email. The problem is that I get only one (usully the first) error email message if 2 or more error events are generated in event log. How could I get both error events?

My trigger:

{SERVER01:eventlog[system].logseverity(4)}=4

Did I made a mistake?

thank you

[Rawlings]

Hi,

I configured to get all system events from one Windows 2008 R2 server every 60s. I see the events in Latest Data.

I also configured trigger to send error logs by email. The problem is that I get only one (usully the first) error email message if 2 or more error events are generated in event log. How could I get both error events?

My trigger:

{SERVER01:eventlog[system].logseverity(4)}=4

Did I made a mistake?

thank you

I think you need to configurate escalation in your action (send message) .

something like that :

Step
From 1
To 0 (0 - infinitely)
Step duration 0 (minimum 60 seconds, 0 - use action default

[Rawlings]

http://www.zabbix.com/documentation/...tion/operation

and

http://www.zabbix.com/documentation/...on/escalations

[kovas]

Rawlings, are you sure, I dont think escalation will help here?

[Rawlings]

I think is the solution . How do you configurate your action ?

[kovas]

Action?

I configured item like this:

https://lh5.googleusercontent.com/-fvWebpv-jC0/SUowOnlvcKI/AAAAAAAABoE/U6Lzdzfyv7Y/s852/ITEM_System_Log.jpg

Only update interval - 30 sec.

and then trigger:
{SERVER01:eventlog[system].logseverity(4)}=4


The problem is that if server generates 2 error messages during that 30 sec. zabbix downloads these 2 errors but trigger only sends me the first error message.