Ad Widget

**servant-frost** · 29-10-2021, 16:12

Does anyone have a suggestion for this?

**Gerald44** · 30-10-2021, 08:05

Originally posted by servant-frost

Hello. I know this log area is supported and I have several other items and triggers for log events in this log section. However, I am having an issue with one.

Microsoft-Windows-Backup/Operational

The log has events in it on my test server (Windows 2019). I am currently pulling items from other log files applications and service logs. However, Zabbix says it is unable to find the channel specified on this one.

Item: eventlog[Microsoft-Windows-Backup/Operational,,,,14,,skip]

Result in Zabbix: cannot open eventlog 'Microsoft-Windows-Backup/Operational':[0x00003A9F] The specified channel could not be found.

Is there something special about this log that it isn't viewable by Zabbix?

Thank you.

I'm not in front of a Windows machine right now, so may be less than helpful

Does the account running zabbix have permissions to that log?

**servant-frost** · 01-11-2021, 17:06

For anyone else that may have this issue in the future, the issue is the event log name. It isnt the same in the Event Viewer as the actual file name.

As you can see from the pic I posted above, the Event Log name is Microsoft-Windows-Backup/Operational. However, if you go to c:\windows\system32\winevt\logs, the actual file name is Microsoft-Windows-Backup-evtx There are many other logs there that use the Operational but for some reason, this one doesn't. Just remove the /Operational in your item key and it will work as expacted.

Ad Widget

Windows Event Logs - Applications and Service Logs

Windows Event Logs - Applications and Service Logs

Comment

Comment

Comment