I have these items:
Data is send by a bash script using zabbix_sender. Something like this:
Data is successfully received by all four items.
I have this trigger:
I need to see in Zabbix dashboard a problem with this description:
But instead, I have seeing a description like this:
I must not use the items logontarget, logonaccount and logonsource in the trigger expression, even knowing that would enable me to use {ITEM.VALUE<1-9>} or {ITEM.LASTVALUE<1-9>} macros in the trigger name.
In these circumstances, is it possible to get values from the items logontarget, logonaccount and logonsource and use them in the trigger name? Someone can help me with this problem description?
Thank you very much in advance.
Name: Logon ID
Type: Zabbix trapper
Key: logonid
Type of information: Character
Name: Logon Target
Type: Zabbix trapper
Key: logontarget
Type of information: Character
Name: Logon Source
Type: Zabbix trapper
Key: logonsource
Type of information: Character
Name: Logon Account
Type: Zabbix trapper
Key: logonaccount
Type of information: Character
Type: Zabbix trapper
Key: logonid
Type of information: Character
Name: Logon Target
Type: Zabbix trapper
Key: logontarget
Type of information: Character
Name: Logon Source
Type: Zabbix trapper
Key: logonsource
Type of information: Character
Name: Logon Account
Type: Zabbix trapper
Key: logonaccount
Type of information: Character
Data is send by a bash script using zabbix_sender. Something like this:
zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logontarget -o 'host01'
zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonaccount -o 'dom\user'
zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonsource -o '10.0.0.1'
zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonid -o '0xb2a32e13'
zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonaccount -o 'dom\user'
zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonsource -o '10.0.0.1'
zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonid -o '0xb2a32e13'
Data is successfully received by all four items.
I have this trigger:
Name: {{HOST.HOST}:logontarget.last()}: Logon by {{HOST.HOST}:logonaccount.last()} from {{HOST.HOST}:logonsource.last()}
Expression: {host02:logonid.diff()}=1
OK event generation: None
PROBLEM event generation mode: Multiple
Allow manual close: Yes
Enabled: Yes
Expression: {host02:logonid.diff()}=1
OK event generation: None
PROBLEM event generation mode: Multiple
Allow manual close: Yes
Enabled: Yes
I need to see in Zabbix dashboard a problem with this description:
host01: Logon by dom\user from 10.0.0.1
But instead, I have seeing a description like this:
{host02:logontarget.last()}: Logon by {host02:logonaccount.last()} from {host02:logonsource.last()}
I must not use the items logontarget, logonaccount and logonsource in the trigger expression, even knowing that would enable me to use {ITEM.VALUE<1-9>} or {ITEM.LASTVALUE<1-9>} macros in the trigger name.
In these circumstances, is it possible to get values from the items logontarget, logonaccount and logonsource and use them in the trigger name? Someone can help me with this problem description?
Thank you very much in advance.