Windows Eventlog, trigger for template & selective Information

[mmrd]

I am monitoring Eventlog of some Windows Servers and I have two issues:

1. Trigger for Template
I created a template for these and configured an item for Eventlog.
But now I have a little Problem because I want to add a Trigger to this template.
My trigger looks like this:

({SERVERNAME:eventlog[System].logseverity(2)}=2)&({SERVERNAME:eventlog[System].logseverity(4)}=4)&({SERVERNAME:eventlog[System].logseverity(8)}=8)

But I can't add this to my template because here "SERVERNAME" I wrote the real name. Is there a variable that catches all the Host Names which are in my template?

Let's say I have Server1, Server2 & Server3 all in my windows_template.
The Item is created for the windows_template, but the trigger not.
So I need a placeholder or a variable for the servernames.

2. Selective Information
I just need some Informations but not all. So I'll configured it like it says in the manual:

{Template_Eventviewer:eventlog[System].logseverity(0)}=4 means HIGH message from System event log.

But I get all: Eventlog:Informations & Eventlog:Warning & Eventlog:Error
I don't want Eventlog:Informations.


I hope you will understand my Problem.

[meduzalt]

If you use template "windows_template" so in the trigger expresion must be template name "windows_template", but not HostName

({windows_template:eventlog[System].logseverity(2)}=2)&({windows_template:eventlog[System].logseverity(4)}=4)&({windows_template:eventlog[System].logseverity(8)}=8)

In the Name of trigger you can use placeholder {HOSTNAME}
Log event on {HOSTNAME} changed ...

2. problem
Try

{Template_Eventviewer:eventlog[System].logseverity(4)}=4

[mmrd]

Thank you a lot!
My first problem is solved. The template works fine. Just like you wrote.

About the second problem "selective information". The trigger now says:

{Template_Windows:eventlog[System].logseverity(4)}=4

I also tried:

{Template_Windows:eventlog[System].logseverity(0)}=4

but I still get all the Informations. "Information" & "Error":




I'll tried other attributes or numbers (like 1 / 2), no change.