Monitoring Users' Login (Windows)

[CD2]

Hi all i have add a new item as below

item type - Zabbix Agent
item key - system.run[query user]
item type - Text

my question here is how i can make trigger that send me alert with the user name that login into that server in details as i'm new to Zabbix (I want step by step solution)



Regards

[CD2]

Any help guys?

[kaspars.mednis]

Hello CD2 !

will try to help a little...

First you must create a trigger on your item

Name: User login {ITEM.LASTVALUE} found on {HOSTNAME}
Severity: Lets say WARNING for example
Expression: {YOURHOSTNAME:system.run[query user].str()}=1

Check "Allow manual close" checkbox, otherwise the trigger will be active forever
with this box enabled you can acknowledge it , and the trigger will be gone

Then go to Configuration > actions and create an action

New Condition: trigger name like User login

Now in operations configure needed operations

p.s
to close the trigger, in trigger view click in ack column on no, then check the close problem checkbox

Hope it helps
Kaspars

[Wayne68]

Hi all i have add a new item as below

item type - Zabbix Agent
item key - system.run[query user]
item type - Text

my question here is how i can make trigger that send me alert with the user name that login into that server in details as i'm new to Zabbix UPSers website (I want step by step solution)



Regards

I have faced the same issue. Can anyone help me?

[josephedison0]

Hello CD2 !

will try to help a little...

First you must create a trigger on your item

Name: User login {ITEM.LASTVALUE} found on {HOSTNAME}
Severity: Lets say WARNING for example
Expression: {YOURHOSTNAME:system.run[query user].str()}=1

Check "Allow manual close" checkbox, otherwise the trigger will be active forever
with this box enabled you can acknowledge it , and the trigger will be gone

Then go to Configuration > actions and create an action

New Condition: trigger name like User login

Now in operations configure needed operations

p.s
to close the trigger, in trigger view click in ack column on no, then check the close problem checkbox

Hope it helps
Kaspars

It's Not Working I Have Checked It Can You Tell Any Other Way ?