Win EventLog Monitoring Not Consistent - Move to 1.5?

[bill.unger]

I have been trying (unsuccessfully) to reliably get Windows Eventlog monitoring working and am nearly at wits end. I would LOVE to roll this solution out to clients, but I can't do it without reliable eventlog monitoring. I have already posted a handful of questions and am still not there - triggers sometimes fire... sometimes they don't. Actions sometimes fire.. sometimes they don't...

http://www.zabbix.com/forum/showthread.php?t=8873

http://www.zabbix.com/forum/showthread.php?t=8963

http://www.zabbix.com/forum/showthread.php?t=8776

So here is my question: I REALLY want to push this out to clients and I REALLY need eventlog monitoring to work. Given that, should I upgrade to 1.5Beta and hope that I get better monitoring?

tia,
b

[bbrendon]

Well, depending on who you ask, event log collections has never worked correctly. Honestly, there is so much other development going on, I think the only way you'll get this working is if you patch the code yourself. From my experience, I get the feeling its not a priority. I actually do collect the logs from the agents, but I don't collect security logs because it breaks things.

Also, I seem to recall someone else made a windows agent at one time. You might look for it. I'm not sure if its up to date or what it does.

[bbrendon]

I looked at your threads and I didn't see the mention of nodata, which i think is important. Some links that might get the functionality you want:

http://www.google.com/search?hl=en&q=site%3Awww.zabbix.com+-%22view+single+post%22+eventlog%20nodata

Also, I don't think syntax eventlog[Application,Error] is valid, though I haven't researched it.

[sege]

I have the same problem here. Can't get reliable eventlog monitoring. Most often it works a few hour after restarting Zabbix server, then it stops.

My problem is though, I think, that the Zabbix agent can't connect to the Zabbix server after a while.

But I'm in the same situation, without reliable eventlog monitoring Zabbix won't exist in my world. Too bad, cause I just love this software, except this problem..

[bill.unger]

Too bad, cause I just love this software, except this problem..

I am so desperate to get this working that I have even begun to try find workarounds - running scripts or something to check the eventlog. Does ANYONE have suggestions?

[bbrendon]

I am so desperate to get this working that I have even begun to try find workarounds - running scripts or something to check the eventlog. Does ANYONE have suggestions?

Weird. I don't really use eventlogs much, but I do collect them... and I haven't noticed a problem in awhile on it collecting events, though I do know if there are too many events to collect, it can cause temporary problems.

I reviewed your posts and it appears to me you haven't run into the eventlog related bugs that do (or did) exist...

Sorry, my guess is you've configured something wrong. No suggestions except for what I have posted. Maybe if you post a summary of what is and is not working for you regarding event logs someone can help...