Zabbix 5.4 Windows Event Log Triggers

[signasty]

Good Morning,
I installed a new instance of Zabbix 5.4, but am a bit confused as to how to structure a trigger for windows event logs with the new syntax. This is what I was using in previous versions.

{Event Logs:eventlog[Security,,,,4728,,].str(Domain Admins)}=1

I am looking to restructure that trigger in 5.4. Thanks again.

[signasty]

Thank you kindly. I will test a little later.

[cyber]

Try with "find" function

https://www.zabbix.com/documentation/current/manual/appendix/functions/history

find(/Event Logs:eventlog[Security,,,,4728,,],,"like","Domain Admins")=1
I think..I dont have a 5.4 to test..:P...