Event Viewer Issues - Again

[cjwallace]

Guys.

Got an odd issue with the event viewer monitoring.

Ok if i clear the security logs in windows and clean the history in Zabbix then everything works fine for a few hours. After i clean the logs and history the Time Stamp and the Local time are almost the same give or take 30seconds to 1 minute apart. That i can live with the important part is the data.

Now as i say after a few hours the time stamp and local time get out of sync but as much as 3 hours and Zabbix is not collecting all events from the security log in windows.

Has anyone seen something like this before? Do i need to make a change in Zabbix so it can process more information?

Thanks in advance

Craig

[cjwallace]

Fingers crossed.

I have changed the account that the Zabbix_agentd runs under and now my event logs in latest data seem to be very stable. They are out by about a second which i can live with and all the data seems to be there.

Any ideas as to what is going on. I would have thought Local System would have been enough for this?

[cjwallace]

Nope still the same. After about an hour the time stamp and the local time are getting more and more out of sync.

Starts off a few seconds, then 5 minutes then 10 etc etc.

This is just pissing me off

[cjwallace]

Guys.

Could it be that the MYSQL database is having a few problems processing all the information?

Is there any tweaks i could do?