Check Log File input

[syntax1127]

Hello ,
I am using Zabbix 2.4 and very happy with the system.
Basically I use it for monitoring process and windows services.
I have already setup the alert email system,hosts, and receiving alerts for failed processes etc.
Now I would like to check if log file on specific application has been changed/modified or not.
Here are some details of what I would like the zabbix to monitor :

If the log has been changed during 07:30-11:00 - DO NOT DO ANYTHING
If the log has NOT been changed from 07:30 till 11:00 - SEND ME AN ALERT(EMAIL)

For example :
I have log file called xxx.log in c:\temp. on server yyy.
I know The xxx log file should change every day between 7:30 to 11:00.
I would like to get an alert every time the log does not change on that time.
I am monitoring Microsoft windows system.
What item should I create in order to accomplish that?
What trigger should I create?
I have already tried the key: vfs.file.time[c:\temp\xxx.log,modify] with no luck.
What type of agent Should I try monitor with? zabbix agent or zabbix agent active?
Which Should I use for Type of information - Log? Text? Numeric?
Could anyone help me out please ? Can you please be specific with creating the item and trigger ?
I would appreciate it very much!
Thanks in advance.

[syntax1127]

Hi

No one to help?

[jan.garaj]

Proof of concept:

Item: vfs.file.md5sum[c:\temp\xxx.log]

https://www.zabbix.com/documentation/2.4/manual/config/items/itemtypes/zabbix_agent

Trigger: vfs.file.md5sum[c:\temp\xxx.log].change()=1
It will raise PROBLEM if the md5checkum of the file has been changed = file content has been changed.

https://www.zabbix.com/documentation/2.4/manual/appendix/triggers/functions

Action: exclude (trigger name not like condition) new trigger from default actions and create new action only for this new trigger (trigger name like condition) + add time condition Time period not in 1-7,07:30-11:00 - it will ignore any problem in selected time period

https://www.zabbix.com/documentation/2.4/manual/config/notifications/action/conditions

It's only concept, so you should to play and improve it. Maybe you has to use =0 in the trigger, maybe you will need 2xtriggers and actions to cover changed and not changed conditions. Dunno. Try it.