Eventlog trigger (Windows)

[kasik]

Hello, i'm kinda new to zabbix and I have problems to create trigger for eventlog item. I would like to monitor Error and Critical events but with sending me notification let's say only once per hour of same event if it creates multiple times. Hope this make sense

This is my trigger now:
{Myserver:eventlog[System,,"Critical|Error"].logseverity(0)}>1 and {Myserver:eventlog[System,,"Critical|Error"].nodata(3600)}=0

and is there any chance of filtering out some events ? like not parametr?

[MightBeAWizard]

Hi!

To make your trigger alarm you once per hour I would say maybe easiest way could be if you make it poll every hour (interval 3600) on your item and then on trigger just check the 'Multiple PROBLEM events generation' box. I am not 100% sure tho but I think it should make it work.

I would rather just monitor only few eventID:s instead of whole eventlog, makes it a lot simpler to see when there is problem on events you are interested.

Hope any of this has any help

[kasik]

Hi!

To make your trigger alarm you once per hour I would say maybe easiest way could be if you make it poll every hour (interval 3600) on your item and then on trigger just check the 'Multiple PROBLEM events generation' box. I am not 100% sure tho but I think it should make it work.

I would rather just monitor only few eventID:s instead of whole eventlog, makes it a lot simpler to see when there is problem on events you are interested.

Hope any of this has any help

Thx for fast reply i'll try what you sugest and will give feedback. I agree it would be best to monitor only specified eventIDs but i don't have list of those what we need