Eventlog Item Stopped Retrieving Log

[Buxton69]

I'm now desperate to get this working correctly.

I have 17 servers all using the same template and same agent 15 servers retrieve the event logs the other 2 do not, none of them work with a trigger set on the event logs.

All servers are using the same template and the same version agent, the config files are identical except for the hostname and IP.

Does anyone have any idea?


Thanks

[Buxton69]

I now have results from turning on the full logging on the server, or at least some failures, could anyone tell me if they know what these errors are.


27309:20091007:152416 unable to get function value: lastvalue IS NULL for function [100100000044958]['SERVER1:eventlog[Security].logseverity(1)]

27309:20091007:152416 Evaluation of expression [{100100000044958}=1] failed [unable to get function value: lastvalue IS NULL for function [100100000044958]['SERVER1:eventlog[Security].logseverity(1)]]

27309:20091007:152416 Expression [{100100000044958}=1] for item [100100000117828]['SERVER1:eventlog[Security]] cannot be evaluated: unable to get function value: lastvalue IS NULL for function [100100000044958]['SERVER1:eventlog[Security].logseverity(1)]

27309:20091007:152416 In evaluate_function(''SERVER1:eventlog[Security].logseverity(1)')

27306:20091007:152416 unable to get function value: lastvalue IS NULL for function [100100000044958]['SERVER1:eventlog[Security].logseverity(1)]

27306:20091007:152416 Evaluation of expression [{100100000044958}=1] failed [unable to get function value: lastvalue IS NULL for function [100100000044958]['SERVER1:eventlog[Security].logseverity(1)]]

27306:20091007:152416 Expression [{100100000044958}=1] for item [100100000117828]['SERVER1:eventlog[Security]] cannot be evaluated: unable to get function value: lastvalue IS NULL for function [100100000044958]['SERVER1:eventlog[Security].logseverity(1)]


Also I've noticed that after a couple of weeks slowly the eventlog item stops retrieving any information, restarting the agent doesn't work but restarting the server makes it work, just the log retrieval, not the triggers, the triggers never work, restarting the server everytime this happens is not an option, is there any way round this?

Has anyone seen these errors before or can explain them? Is this all a feature or a bug?

[Buxton69]

I was wondering if anyone had any input or know of anything I could look at for this problem as it's been quite a while and this issue still remains unresolved.

Thanks

[Buxton69]

I still have this problem, does anyone have an update on this?

Thanks

[Buxton69]

I still have this problem, anyone have any updates for me? Zabbix team perhaps?

Thanks in advance

[dmz]

Lock wait timeout exceeded

I've also noticed this on my log monitoring. It's not looking like there is any response since you have lots of posts but no responses from anyone so I'm adding that I am also seeing / having this problem...

David

[GArmao]

same problem here on zabbix 1.8, I can usually fix the problem by restarting the zabbix agent on clients many times and disabling/reenabling the zabbix host on my zabbix server (no need to restart the server).
Pretty annoying though...also because it keeps happening from time to time