Win32 Agent and Event logs

[donjjones]

Noticed that when we setup active checks for event logs, that the Win32 agent was collect ALL event data from logs including all past data which we do not need. We only need data from the time the agent is installed moving forward. Is there a way around this or to minimize the amount of data that is collected?

Thanks!

[RohrbaGe]

Eventlog History

Yes, I noticed the same.

I aggree that this is not needed really to get the history
It is putting heavy load on the zabbix agent, so that it failed sometimes.

Also it seems that the timestamp is used when it goes into Zabbix.
So you have the whole history with one time stamp,
this has some bad effects on sorting.


Regards

Gerald

[donjjones]

Yes we noticed the timestamp issue as well. Anyone know of a workaround for both of these? We may need to clear out event logs before installing, but if there was a better way, that would be great

[themons]

It may be more usefull to be able to chose a source or a severity for events to store in the data base.

I also want to if ther is more option with the parameter eventlog[]