Ad Widget

Collapse

Monitor logs from Forwarded events folder

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Carrotcake
    Junior Member
    • Apr 2021
    • 2

    #1

    Monitor logs from Forwarded events folder

    Hello. I been working with zabbix for quite a while couple month, maybe more. I encountered a problem where i cannot monitor logs from Event viewer Forwarded events folders. But i can from Security and System folders. I have logs in forwarded events folder and i configured items and triggers so they would get logs from that folder. eventlog[ForwardedEvents,,,,4662,,] looks like this.
    Any ideas or suggestions would be very appriciated. Im using 4.0 LTS version
    Last edited by Carrotcake; 15-04-2021, 17:18.
  • Carrotcake
    Junior Member
    • Apr 2021
    • 2

    #2
    Oh, didn't read that carefully enough, thank you very much.

    Comment

    • cyber
      Senior Member
      Zabbix Certified SpecialistZabbix Certified Professional
      • Dec 2006
      • 4807

      #3
      Docs:
      https://www.zabbix.com/documentation...agent/win_keys
      eventlog[name,<regexp>,<severity>,<source>,<eventid>,<maxli nes>,<mode>]
      Note that the agent is unable to send in events from the "Forwarded events" log.

      It is not exactly explained why, you can ask support about that. But at least it should not come a s a surprise.
      Last edited by cyber; 24-12-2021, 21:12.

      Comment

      • dimir
        Zabbix developer
        • Apr 2011
        • 1080

        #4
        Some explanation and a change request: https://support.zabbix.com/browse/ZBXNEXT-9135

        Comment

        Working...