Ad Widget

Collapse

windows account name and workstation id from event log

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • jhtj
    Junior Member
    • Oct 2018
    • 1

    #1

    windows account name and workstation id from event log

    i have an item and a trigger for when a user logs in to a windows domain
    key: eventlog[Security,"Logon Type: [271]",,,4624,,]

    and im trying to have the trigger output the account name and workstation used for login. both appear as strings in the log
    Account Name: Administrator and Workstation Name: WIN-xxxxxxxxxxx how would i go about inserting these values into a macro or a tag for the trigger? i found and tried this solution from an old forum post, but it does not seem to work no matter where i insert it or what settings i change. https://www.zabbix.com/forum/zabbix-...er-tags-regexp
Working...