Ad Widget

Collapse

Alert who has initiated the Windows server down

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Tharakaw
    Member
    • Jun 2018
    • 32

    #1

    Alert who has initiated the Windows server down

    Hi All,
    I am trying to alert who has initiated the windows server down when anyone reboot or shutdown the server. For this requirement, I am monitoring the 1074 event log ID for windows server. That event ID is creating once initiated the reboot or shutdown. Below screenshot for the event ID from Windows.

    Click image for larger version

Name:	Capture.JPG
Views:	898
Size:	52.3 KB
ID:	363853


    Below are the configured Zabbix item and trigger.

    Click image for larger version

Name:	Capture2.JPG
Views:	858
Size:	67.4 KB
ID:	363854




    Click image for larger version

Name:	Capture3.JPG
Views:	882
Size:	68.3 KB
ID:	363855

    Alert is triggered from zabbix as below.

    Click image for larger version

Name:	Capture4.JPG
Views:	853
Size:	62.2 KB
ID:	363856



    There are two issues still I could not resolve.
    1. Alert is only triggered once after rebooting the server.(It is not triggered any alert if server is down state, but event is created before shutdown the server)
    2. The problem trigger is not resolved after start the server.
    Please kind enough to sort out this issue.

    Thank you.
Working...