Eventlog Monitoring

[Rumo]

I have a question.
I have configured the eventlog function, with this tutorial

Thank you cstackpole for your investigations. Based on this, here is an example (cookbook) for everybody also struggling around with eventlog:

-) the source is "W32Time"
-) the description contains "synchronisiert"
-) the trigger goes off after 30 seconds
-) the eventdetails should be reportet in the mail

1) Create an item
Type: ZABBIX agent (active)
Key: eventlog[System]
Type of information: Log

2) Create a trigger
({mypc:eventlog[System].logsource(W32Time)}=1)&({mypc:eventlog[System].str(synchronisiert)}=1)&({mypc:eventlog[System].nodata(30)}#1)
you can add "logseverity()" the same way

3) Create a action
Condition: Host = mypc; Trigger value = ON (when you only want one message)
Message: {mypc:eventlog[System].last(0)}

So my problem is, that i get an e-mail notification with body "*Unknown*".
Why doesn't it work.

[cstackpole]

If you are on the 1.4 Zabbix try this as your message:
{{HOSTNAME}:{TRIGGER.KEY}.last(0)}

If I understand your problem, this should help.