Hello, can someon help me with following problem.
I have item with key eventlog[Security,,,,4740,,,] for receiving only eventid 4740 event (because I don't want all from security log and can't make unnacessary load of zabbix server).
How can I make trigger which activate every when item receive data (any user block his ms account)
I tried to do these two methods
1) {ASUDDC01:eventlog[Security,,,,4740,,,].strlen(1s)}>0
2) {ASUDDC01:eventlog[Security,,,,4740,,,].logeventid(4740)}=1
but both reports ZBX_NOTSUPPORTED
I have item with key eventlog[Security,,,,4740,,,] for receiving only eventid 4740 event (because I don't want all from security log and can't make unnacessary load of zabbix server).
How can I make trigger which activate every when item receive data (any user block his ms account)
I tried to do these two methods
1) {ASUDDC01:eventlog[Security,,,,4740,,,].strlen(1s)}>0
2) {ASUDDC01:eventlog[Security,,,,4740,,,].logeventid(4740)}=1
but both reports ZBX_NOTSUPPORTED