Count Item

[wagnerjs83]

Hi,

item A receives key "eventlog [Application ,," Warning "]

is it possible to create item B to receive quantity of log that item A received within 1 hour?

Thanks

[ingus.vilnis]

https://support.zabbix.com/browse/ZBXNEXT-4781

[Semiadmin]

Calculated item:
count("eventlog[Application ,," Warning "]",1h,".*",regexp)

[wagnerjs83]

Calculated item:
count("eventlog[Application ,," Warning "]",1h,".*",regexp)

Error:

Incorrect function 'count' expression. Check expression part starting from: "eventlog[Application ,,"

Suggestion?

[ingus.vilnis]

Escape the quotes inside the item key.

count("eventlog[Application ,,\" Warning \"]",1h)

[Semiadmin]

I tried to escape quotes but forum's engine devoured slashes

[wagnerjs83]

Item Application_Error




Item count log1



item count log 2



Error count log 1



Error count log 2

[Semiadmin]

" Warning " or "Error"?

[ingus.vilnis]

So what does the error message say?
Item does not exist, right?

In your first screenshot you have an item monitoring ERROR, not WARNING as in original description. There must exist also an item which you later are referencing in calculated items' formula.

[wagnerjs83]

lol

[ingus.vilnis]

In the calculated item formula there is a space between quotes and the word " Warning ". Could be some copy paste or form formatting issue. Remove the spaces and see if the item goes supported within some 10 minutes. .

[wagnerjs83]

In the calculated item formula there is a space between quotes and the word " Warning ". Could be some copy paste or form formatting issue. Remove the spaces and see if the item goes supported within some 10 minutes. .

Formula: count("eventlog[Application ,,"Warning"]",1h,".*",regexp)

latest data: Incorrect function 'count' expression. Check expression part starting from: "eventlog[Application ,,"

[ingus.vilnis]

count("eventlog[Application ,,\"Warning\"]",1h)

[wagnerjs83]

count("eventlog[Application ,,\"Warning\"]",1h)

count("eventlog[Application,,"Warning"]",1h)

Perfect!!!

Thank you very much!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!