Windows Event Logs

[Arugg]

I have a wierd problem. I am currently monitoring 7 Windows servers, half of which are monitoring Event Logs fine, the others are not. I am using the same agent (1.4.4) and conf file for all of them. I can not figure out why some don't work.

Please help.

[t2y]

Hi Arugg,

I have questions to evince your problem.

• Are those Windows servers same product/version?
• Are those Windows servers in same physical network?
• Can problematic Windows servers resolve own hostname via DNS(or hosts file) which are registered as "Name" on Configuration/Hosts window in zabbix-server?

[753713]

is the zabbix-name = windows server name?

I have the effect, if a different name between zabbix-name and windows server name.

[t2y]

hmm, I might misunderstand, because I haven't configured zabbix-agent on Windows server. Please point out if I misunderstand.

We have to configure "Hostname=xxx" to get Event Logs in zabbix-agentd.conf on Windows server. Because, on ZABBIX server, we have to configure Type:ZABBIX agent(active). I know "ZABBIX agent(active)" has notes.

On ZABBIX agent(Windows server):
- we configure "Hostname=xxx" in zabbix-agentd.conf

On ZABBIX server:
- we configure as "Name" on Configuration/Hosts window

I know it have to match "Hostname" = "Name". It might need to resolve the "Hosname" via DNS(or hosts file) on ZABBIX server, but I'm not sure.

Do you understand what I said?

[753713]

if:
windows %computername% = name(on zabbix Server) and hostname (zabbix-agentd.conf ) monitoring eventlog without problems.

[Arugg]

Thanx guys. Here's what I know. I have the HOSTNAME=*zabbix server*, and the NAME=*windows server name*. I can resolve the names fine. I also have the Host configured to monitor via the IP Address not the Host name. All the monitored servers are W2K3 SP2. I am getting all other information on the problem servers except the event logs. I'm just stumped as to why.

[Mindaugas]

Hi,
I have the same problem.
Have you resolved Log monitoring problem?