Hello,
First of all I'd like to say thanks for Zabbix (version 1.1.4, Win32 agent 1.1.3), it's a great product so far, both in what it can do and it's ease of use.
I have a couple of tips/comments with it, specifically with the Win32 agent (not bug reports, just functionality comments, specifically with capturing Win32 Eventlogs). If any of these are in the works or have already been asked for, I apologize:
- The capturing of eventlogs works fine, but it would be nice to also see the Event ID and User captured in Zabbix (important items that don't seem to be currently captured), it would also be good to have Triggers/Actions based on those items (specifically EventID, similar to logseverity and logsource).
- When I am capturing eventlogs, I currently have a trigger that turns on when an Error level eventlog entry is made ({Windows_t:eventlog[Application].logseverity(4)}=4), and the action linked to this works as expected. If a subsequent Error level eventlog entry is made, since the Trigger is already ON, the action won't take place again. The trigger doesn't turn off until an Informational or Warning entry is made in the eventlogs, or Zabbix service is restarted. It would be great if Zabbix can send an e-mail whenever an Error level eventlog entry is made, no matter what the state of the Trigger (if there's a way to do that already, please let me know!!). I guess creating an action on a source other than a trigger would work well also.
That's all I have so far...but in the meantime, I love where this product is headed.
Thanks,
- Alfonso
First of all I'd like to say thanks for Zabbix (version 1.1.4, Win32 agent 1.1.3), it's a great product so far, both in what it can do and it's ease of use.
I have a couple of tips/comments with it, specifically with the Win32 agent (not bug reports, just functionality comments, specifically with capturing Win32 Eventlogs). If any of these are in the works or have already been asked for, I apologize:
- The capturing of eventlogs works fine, but it would be nice to also see the Event ID and User captured in Zabbix (important items that don't seem to be currently captured), it would also be good to have Triggers/Actions based on those items (specifically EventID, similar to logseverity and logsource).
- When I am capturing eventlogs, I currently have a trigger that turns on when an Error level eventlog entry is made ({Windows_t:eventlog[Application].logseverity(4)}=4), and the action linked to this works as expected. If a subsequent Error level eventlog entry is made, since the Trigger is already ON, the action won't take place again. The trigger doesn't turn off until an Informational or Warning entry is made in the eventlogs, or Zabbix service is restarted. It would be great if Zabbix can send an e-mail whenever an Error level eventlog entry is made, no matter what the state of the Trigger (if there's a way to do that already, please let me know!!). I guess creating an action on a source other than a trigger would work well also.
That's all I have so far...but in the meantime, I love where this product is headed.
Thanks,
- Alfonso
Comment