Exporting Zabbix Windows Event Logs to CSV/JSON on demand

[tbala]

Hello,
I'm working with Zabbix 7.0.9 to monitor Windows servers using the Zabbix agent, and I am looking to automate the export of Windows Event Logs to CSV or JSON on demand.
My goal is to be able to export these logs on demand with specific filters, either by host group, individual host, or also by date range.
Context:

• Zabbix Version: 7.0.9, with the stack running with Docker.
• Hosts: Windows servers with an active Zabbix agent, generating Windows Event Logs.
• Objective: Export the Windows Event Logs on demand, filtering by:
  • Host group: Export logs from all hosts in a specific group.
  • Individual host: Export logs from a specific host.
  • Date range: Export logs within a specific date range.

I'm looking for:

• Solutions or Zabbix modules that allow filtering Windows Event Logs by host, host group, and date range, and exporting them to CSV or JSON on demand.

Thank you very much for your help!

[PavelZ]

Maybe this is not what you wanted, but if you set up traditional logging stack with Promtail, Loki, and then connect using Grafana to Loki, then in Grafana there is a button to save to txt, json and csv
Also some other log exporters and log store software can work with windows event log.

This will really allow you not to create a single new program.