Stop replication of Hyper-V VM (Eventlog and logsource)

[elvis.pompeu]

Good morning to all staff,

The thing is, I'm trying to do with any form that manages the Zabbix alert when stopping the replication of Hyper-V generated by the alert in Event Viewer, but tried the two ways, according to the official documentation, and neither worked ... If I put only one System or Application, for example, it will generate ALL of these alerts, and that's not what I want, but the specific, as in the case of this situation that I generates Source: Hyper-V VMMS the Event ID 32088, which is the ID corresponding to the event ERROR replication Hyper-V ... I tried both models of triggers:

{Template_test:eventlog[System,,"Error","Hyper-V-VMMS",32088].logseverity(4)}=4

{Template_test:eventlog[System].logsource(Hyper-V-VMMS)}=4

And unfortunately it will not, but if I use the Event Viewer default template that has the actual site of Zabbix, it monitors in a generic way, ie monitors in General!!
For example: {Template_test: eventlog [System]. LogSeverity (4)} = 4
But this type of trigger will return me ALL ERRORS events generated by system and do not want it, I just want this Event ID specified Hyper-V ...

If someone digs this and part of monitoring Event Viewer in Windows Server, I'd be grateful, because the monitoring with Unix / Linux to me is more quiet, but I monitor Heterogeneous environments, so it takes me pay attention to these details ...

Thanks and regards,

Sorry for my english ...

[elvis.pompeu]

Guys, help me... =/

[s4chin]

try reference of Domain Controller

I also want to monitor Hyper-V replication (with errors)....but im linux guy dont hv much info about windows...... i have some temples as follows may this domain controller syntax help you...


Name: DC LOG Directory replication error
Key : system.eventlog[Directory_Service,NTDS_Replication,1863,1]

Trigger : ({Template_AD_Domain_Controller:system.eventlog[Directory_Service,NTDS_Replication,1863,1].strlen(0)}>1)&({Template_AD_Domain_Controller:sys tem.eventlog[Directory_Service,NTDS_Replication,1863,1].nodata(30)}#1)


thnx n reply