filter eventlog

[fabiomc]

hi

i have zabbix 1.6.7 with mysql

i have created ITEM with eventlog[Security] so the windows server sends all event about security

so the database mysql is growing too much
it's possibile transfer only some eventid (576,528,etc..) from windows server to zabbix server ?

how?

thanks
Fabio

[NOB]

hi

i have zabbix 1.6.7 with mysql

i have created ITEM with eventlog[Security] so the windows server sends all event about security

so the database mysql is growing too much
it's possibile transfer only some eventid (576,528,etc..) from windows server to zabbix server ?

how?

thanks
Fabio

Hi Fabio

there is no way in ZABBIX (up to 1.6.x) to access the Event Ids, at all.
Neither on the agent nor on the server

This feature was added to 1.7.x and will be in 1.8.

We added a custom item (eventlog-ng) especially for this purpose
in the ZABBIX agent for Windows.
But, be aware, you must change the server code, too, before
you can really use it.

HTH,

Norbert.