Not get result from Windows Log Event on zabbix server

[ferdana]

Hi Everyone,

i had try to set up Windows event Logs, but in my zabbix server Windows Basic template i didn't find those template, did you have any advice to me to resolved this task, this i attached to you my zabbix version etc as follows :

Ubuntu = 22.04.3 LTS

kernel = Linux 6.5.0-14-generic

Arc = x86-64

installed on Local Machine = Hyper-V

Zabbix-Server Ver = 6.0.25

wget https://repo.zabbix.com/zabbix/6.0/u...u22.04_all.deb

dpkg -i zabbix-release_6.0-4+ubuntu22.04_all.deb

apt update

apt install zabbix-server-mysql zabbix-frontend-php zabbix-apache-conf zabbix-sql-scripts zabbix-agent




tail -20 /var/log/zabbix/zabbix_server.log

1100:20240125:150905.173 free chunks of size 168 bytes: 1

1100:20240125:150905.173 free chunks of size 176 bytes: 21

1100:20240125:150905.173 free chunks of size 184 bytes: 3

1100:20240125:150905.173 free chunks of size 192 bytes: 21

1100:20240125:150905.173 free chunks of size 200 bytes: 2

1100:20240125:150905.173 free chunks of size 208 bytes: 16

1100:20240125:150905.173 free chunks of size 216 bytes: 2

1100:20240125:150905.173 free chunks of size 224 bytes: 20

1100:20240125:150905.173 free chunks of size 232 bytes: 1

1100:20240125:150905.173 free chunks of size 240 bytes: 33

1100:20240125:150905.173 free chunks of size 248 bytes: 2

1100:20240125:150905.173 free chunks of size >= 256 bytes: 1811

1100:20240125:150905.173 min chunk size: 24 bytes

1100:20240125:150905.173 max chunk size: 19744 bytes

1100:20240125:150905.173 memory of total size 8247296 bytes fragmented into 8809 chunks

1100:20240125:150905.173 of those, 1593152 bytes are in 2142 free chunks

1100:20240125:150905.173 of those, 6654144 bytes are in 6667 used chunks

1100:20240125:150905.173 of those, 140928 bytes are used by allocation overhead

1100:20240125:150905.173 ================================

1100:20240125:150905.173 value cache is fully used: please increase ValueCacheSize configuration parameter



Thank you for Advice

[cyber]

Start with fixing this "1100:20240125:150905.173 value cache is fully used: please increase ValueCacheSize configuration parameter"

https://www.zabbix.com/documentation/current/en/manual/appendix/config/zabbix_server#valuecachesize

Default is 8M, double it, restart server, see if it stays running, if not, double it once more etc... After that you may even get data from agents...

[ferdana]

Start with fixing this "1100:20240125:150905.173 value cache is fully used: please increase ValueCacheSize configuration parameter"
https://www.zabbix.com/documentation...valuecachesize
Default is 8M, double it, restart server, see if it stays running, if not, double it once more etc... After that you may even get data from agents...

Hello,
i had increase ValueCacheSize and that event from windows log event still not appear .
and i had creation new template with name windows basic with item :
name Event ID failed Logon
type zabbix agent (active)
key eventlog[Security,,,,4634,,skip]

host template use
Windows by zabbix agent default from zabbix server
windows basic creation by me

i get tutorial from this video : https://youtu.be/cXvx88zBN6c

did you have any idea to fixed that issue

thank you for advice


ferdana