Hi All,
I am trying to alert who has initiated the windows server down when anyone reboot or shutdown the server. For this requirement, I am monitoring the 1074 event log ID for windows server. That event ID is creating once initiated the reboot or shutdown. Below screenshot for the event ID from Windows.

Below are the configured Zabbix item and trigger.


Alert is triggered from zabbix as below.

There are two issues still I could not resolve.
Thank you.
I am trying to alert who has initiated the windows server down when anyone reboot or shutdown the server. For this requirement, I am monitoring the 1074 event log ID for windows server. That event ID is creating once initiated the reboot or shutdown. Below screenshot for the event ID from Windows.
Below are the configured Zabbix item and trigger.
Alert is triggered from zabbix as below.
There are two issues still I could not resolve.
- Alert is only triggered once after rebooting the server.(It is not triggered any alert if server is down state, but event is created before shutdown the server)
- The problem trigger is not resolved after start the server.
Thank you.