How to monitor Windows Event Log with eventlog item?

[mtpumpkin]

Dear all,
I setup zabbix agent on AD pc and turn on security audit, then I create a template just for monitoring windows event log from that AD. I tried many item that I collect from the internet but no ones work althought the connection is okay and others data are showed normally. I just want to monitor event about user logon/logoff. Any ideas?
Thanks all.

[vijayk]

FYI for snap

eventlog[Security,,,,^4625,,skip]

Use this

[mtpumpkin]

Done

fill
Server = Zabbix Server IP
ActiveServer = Zabbix Server IP
Hostname = FQDN of host
Close topic here

[nczaw]

Hi mtpumpkin,
Could you please this issue solution detail ? Now i faced with same issue.

[vijayk]

Hi mtpumpkin,
Could you please this issue solution detail ? Now i faced with same issue.

Edit Zabbix Agent config with

Server = Zabbix Server IP
ActiveServer = Zabbix Server IP
Hostname = FQDN of host

[nczaw]

Hi Vijayk,
Thanks a lot for your reply and i configured one new item "eventlog[Security,,,,4725,,]" but when i checked at zabbix tools for this item task no any activity and log coming . I tried with many way. Could you please share me detail process of this log integrations.

[vijayk]

Use "eventlog[Security,,,,^4725,,skip]"

[nczaw]

FYI for snap

[vijayk]

FYI for snap

eventlog[Security,,,,^4625,,skip]

Use this