Eventlog - Hostname

[rvillaca]

Hi,

The eventlog feature of the win32 agent is a great feature in the product, but I have a little problem to monitor MSCS cluster nodes. The Microsfot cluster service replicates the eventlogs, so I think it would be insteresting to zabbix to get this information for ms cluster users.

Thanks,

Rodrigo Villaça

[elkor]

create a new host in the frontend that has the virtual IP address of the cluster (not the physical IP of the individual nodes), and have agent pull the eventlong info from that. This will stop you from getting duplicate entries from the individual nodes.

[rvillaca]

Eventlog

I need to view the events filtered by hostname. I have an active/active sql cluster, It would be very nice if we can monitor the events for every virtual server or cluster node on its own log.

[elkor]

Well then you can collect them from the individual nodes IP addresses, the problem as I understand it is that the cluster is mirroring the logs instead of leaving them discrete; the only solution for that is to make microsoft stop mirroring them.
I don't know much about microsoft clustering so correct me if I'm wrong, and I've done it maybe three times and never really needed to support it so forgive my ignorance in exactly how to do it.

[rvillaca]

that is by design, we cant stop the cluster, but if zabbix collect the hostname information, cluster users will be able to track the logs...

I have found that zabbix dont get the eventid information (that can be used to solve problems using MS knowledge base or eventid.net).

Rodrigo