get log details in email

[majorkuso]

I have zabbix agent monitoring event viewer, but when I get emails I do not get the full event info. How do I set it so it isn't a problem, just sends logs?

item eventlog[Security,,,,^4624$]

trigger {dc1:eventlog[Security,,,,^4624$].logeventid(^4624$)}=1

[Atsushi]

Try writing a macro {ITEM.VALUE} that indicates the value of the item in the action message.

https://www.zabbix.com/documentation/current/manual/appendix/macros/supported_by_location

[majorkuso]

ok, but how do I keep the trigger from going into a problem state? this prevents it from sending further logs.

[Atsushi]

If you do not set the state of the trigger to failure, Zabbix will not be able to notify you when the conditions set for the trigger are met. If you want to generate an event each time the trigger condition is met, try selecting Multiple in the PROBLEM event generation mode in the trigger settings.

[majorkuso]

ok so even though the event is showing as a problem it really isn't one, I select Multiple and I get the emails as expected.