Ad Widget

Collapse

Windows Event Log Monitoring

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • abstract_paul
    Junior Member
    • Nov 2020
    • 1

    #1

    Windows Event Log Monitoring

    I'm trying to trap a specific event in the Windows Application logs. The event code is 107 and is 'Error'. I've searched the forum and thought {hostname:eventlog[Application].logeventid(107)}=1 might work. Unfortunately I get an error "Incorrect item key "eventlog[Application]" provided for trigger expression on .....". Am I missing something?
  • NilsA
    Senior Member
    • Sep 2020
    • 102

    #2
    Zabbix doesn't recognize the item key. I assume you configured the item already? If that's the case you should be able to see a lot of text under monitoring -> latest data from the item, since you didn't add the option "skip".
    I don't know if "logeventid" is viable in the trigger context - if it is, {hostname:eventlog[Application].logeventid}=107 could work. (Check the syntax beforehand). The trigger expression needs to result in "true" to create a problem event.

    Comment

    • dimir
      Zabbix developer
      • Apr 2011
      • 1080

      #3
      The trigger expression
      Code:
      {hostname:eventlog[Application].logeventid(107)}=1
      is correct but as NilsA mentioned, your host hostname does not contain an item with key eventlog[Application]. Create that item and you will be fine.
      Last edited by dimir; 20-11-2020, 16:52.

      Comment

      Working...