Windows Event Log Monitoring

[matidr]

Hi everyone,

I´ve been looking to a comprehensive explanation on how to add an item looking for a specific Log on Windows Event Log. I´ve done this al ready by its ID, but I´m now with the issue of trying to find a Log between logs with the same ID.

I´m using Zabbix 5.0.7
This is my Key: eventlog[Application,.str("Fault bucket"),"Information",,1001,10,skip]
This is the Log I´m testing on:


My goal is to find the Log by its Description.

This is not working for me right now. Any ideas?

Thanks!

Matías.

[johndoe2374]

Hello. Your regexp is in wrong syntax, you don't need to use str(). You can use PCRE for extended conditions, but in your case you can just use "Fault bucket":

https://www.zabbix.com/documentation/5.0/manual/config/items/itemtypes/zabbix_agent/win_keys

[matidr]

Hello. Your regexp is in wrong syntax, you don't need to use str(). You can use PCRE for extended conditions, but in your case you can just use "Fault bucket":
https://www.zabbix.com/documentation...agent/win_keys

Worked like a charm! Thanks a lot!

This is the new Key: eventlog[Application,"Fault bucket","Information",,1001,10,skip]