Display data from Windows EventLog

[gilur]

Hi,
I'm monitoring Windows eventlog for specific events. In this example - security logs for users added to admin group. Triggers work fine but I would like to display some additional info from within the event log itself - on the Dashboard.

In the picture I attached - on the 2nd problem I would like to see the parameters like the username that was added and by whom. These parameters exist in the windows log that is parsed but I can't find a way to display them.
Is there a way to do it ?
thanks

[cyber]

If the data is present in item value, you can try to parse it out with macro functions, like regsub or iregsub ans use it to construct better event name

https://www.zabbix.com/documentation/6.0/en/manual/config/macros/macro_functions#supported-macro-functions

[gilur]

If the data is present in item value, you can try to parse it out with macro functions, like regsub or iregsub ans use it to construct better event name
https://www.zabbix.com/documentation...acro-functions

Cool. I will try that.
Is there a way (page/site) in which I can test my macro while building it ? (entring the original string and see what the macro returns?)

[ElzminBerth]

Hi,
I'm monitoring Windows eventlog for specific events. In this example - security logs for users added to admin group. Triggers work fine but I would like to display some additional info from within the event log itself - on the Dashboard.

In the picture I attached - on the 2nd problem I would like to see the parameters like the username that was added and by whom. These parameters exist in the windows log that is parsed but I can't find a way to display them.
Is there a way to do it ?
thanks

How are you currently monitoring the Windows event log for specific events, particularly security logs for users added to the admin group?

[gilur]

Event ID 4732 – A member was added to a security-enabled local group.
If filtering this event from the security log