I am trying to get a trigger from a Windows Server 2012 R2 Standard eventlog. I have spent some time trawling the forum trying different examples of how this should work. Please can someone advise how to do this as very frustrated now.
I have created an Item as follows
Name = EVENTLOG Application
Type = Zabbix Agent (active)
Key = eventlog[Application,,,,^4098$]
Type of Information = Log
Update interval = 1m
History storage period = 90d
Applications = Zabbix Agent
Enabled = true
I have then created a trigger from the item as follows
Name = NAV Licence Out
Item = ATH12S010: EVENTLOG Application
Severity = P2
Expression = {ATH12S010:eventlog[Application].logeventid(4098)}=1
Enabled = true
This creates a trigger with the following expression in it
(({ATH12S010:eventlog[Application,,,,^4098$].regexp({ATH12S010:eventlog[Application].logeventid(4098)})<>0)
Both the Item and the Trigger have saved successfully and show as enabled.
I have created an Item as follows
Name = EVENTLOG Application
Type = Zabbix Agent (active)
Key = eventlog[Application,,,,^4098$]
Type of Information = Log
Update interval = 1m
History storage period = 90d
Applications = Zabbix Agent
Enabled = true
I have then created a trigger from the item as follows
Name = NAV Licence Out
Item = ATH12S010: EVENTLOG Application
Severity = P2
Expression = {ATH12S010:eventlog[Application].logeventid(4098)}=1
Enabled = true
This creates a trigger with the following expression in it
(({ATH12S010:eventlog[Application,,,,^4098$].regexp({ATH12S010:eventlog[Application].logeventid(4098)})<>0)
Both the Item and the Trigger have saved successfully and show as enabled.
Comment