Windows event log id monitoring

[Michael0]

I´m trying to monitor the windows event log for ID´s.

I would like to check if a specific event id (e.g. 1234) is written to the "System" log

I would do this with a zabbix agent active check:

eventlog[logtype,<pattern>,<severity>,<source>,<eventid>,<m axlines>,<mode>]

My Item:
eventlog[System,,,,1234]

Then, just for testing, I will manually create a system event entry:

c:\>eventcreate /l System /t INFORMATION /id 1234 /d "just a test"

But I get no values back from zabbix, when I check the latest data for this host.

Whats wrong with my item?
I´m running now 2.0.6 because with 2.0.4 it´s also not working.

[Michael0]

realy no tipps so far?

I´ve also found this entry in the zabbix server log:

cannot send list of active checks to [hostIP]: host [hostname] not found

I have already added the Hostname=xxxx to the clients zabbix_agentd conf file

[ArtemK]

Hello,

check that hostnames are the same in zabbix agent config and in host configuration on zabbix server (Host Name).

You can also debug this issue with zabbix_get and debug logging on agent.

[Michael0]

Thanks ArtemK for the tipp!

I also figured it out by myself, that is was related to the missing Hostname in the agentd conf file from the client.
Now its working!