Ad Widget

Collapse

Windows Event ID trigger failing

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Wildingc
    Junior Member
    • Jun 2020
    • 1

    #1

    Windows Event ID trigger failing

    I am trying to get a trigger from a Windows Server 2012 R2 Standard eventlog. I have spent some time trawling the forum trying different examples of how this should work. Please can someone advise how to do this as very frustrated now.

    I have created an Item as follows
    Name = EVENTLOG Application
    Type = Zabbix Agent (active)
    Key = eventlog[Application,,,,^4098$]
    Type of Information = Log
    Update interval = 1m
    History storage period = 90d
    Applications = Zabbix Agent
    Enabled = true

    I have then created a trigger from the item as follows
    Name = NAV Licence Out
    Item = ATH12S010: EVENTLOG Application
    Severity = P2
    Expression = {ATH12S010:eventlog[Application].logeventid(4098)}=1
    Enabled = true

    This creates a trigger with the following expression in it
    (({ATH12S010:eventlog[Application,,,,^4098$].regexp({ATH12S010:eventlog[Application].logeventid(4098)})<>0)

    Both the Item and the Trigger have saved successfully and show as enabled.
  • vidarfs
    Junior Member
    • Jun 2021
    • 2

    #2
    I´m trying to do a simular task

    Item Key
    eventlog[Application,,Error,,42012,,]

    I dont know how i should have the trigger

    Comment

    Working...