Hello, folks!
Is it possible to, automatically, monitor EventIDs in a Windows host? Right now I'm trying to monitor a machine with a Rapid Recovery being executed, a few events have occured and so when we go and check the events in the Event Viewer there are quite a few entries with useful text that could be used to help us know what happened.
I've searched around but the only thing I could find was that Zabbix (which is the monitoring tool we use) has an item for event logs but we can only add them manually.
So, is there any way we could do this without having to go by event id by event id?
Right now we only have one item configured like this: eventlog[Application,,,,539,,skip] so it brings information about a page %5 failed verification due to a timestamp mismatched.
Is it possible to, automatically, monitor EventIDs in a Windows host? Right now I'm trying to monitor a machine with a Rapid Recovery being executed, a few events have occured and so when we go and check the events in the Event Viewer there are quite a few entries with useful text that could be used to help us know what happened.
I've searched around but the only thing I could find was that Zabbix (which is the monitoring tool we use) has an item for event logs but we can only add them manually.
So, is there any way we could do this without having to go by event id by event id?
Right now we only have one item configured like this: eventlog[Application,,,,539,,skip] so it brings information about a page %5 failed verification due to a timestamp mismatched.