ZBX 6.4.4
I have ect 10 M monitoring vCentrum VMWare. Default templates. I created dependent item by manual https://www.zabbix.com/documentation...nt-log-records (Match reg exp) BUT from this time isnt write any from vCentrum log! I deleted dependent Item BUT same isue! Not supported item and in detail: Too old events requested. I dont have any test zabbix for ask to same url. This problem started after i try create dependent item from manual. I see on ZBX-22754, this is same problem.
We canot work with vmware log and create dependent items from master item.
Comback to corect state and catch logs from VMWare i s restart Zabbix server!
Next I try reg exp .*Created virtual machine.* \0 - same error and block all capturing log from VMware - Too old events requested.
I dont undestand! This is Dependend item! Its query will be ask internal DB of ZBX not ask VMWare SDK. And generate this problems. I was tested preprocesing qury everiting looks good. When there will be any error test will be end with Information error. I cut and copy log data from latest data insert to value in preprocesing test and started test - OK output was only one line:"Created virtual machine X573VM on raga.domain.local, in town-DC1" But in production error and crashed.
Where can be problem on production data? (I ask in dependent item its ask local DB ZBX! Or NO?!) And why crashed with same error: Too old events requested PARENT item! And now it is in STATUS - Not supported!!! Why parent item?!
When I make same mistake in regexp Q crash only dependent item. In this case crash ALL LOG query to VMWare! Dependent AND PARENT Item. And resolution is delete dependent item and restar full zabbix server.
I try delete preprocesing in depended item. And set history to 1d. Item take data from master item and than crash both items master and depended.
This is my assumption that is BUG in Zabbix.
I have ect 10 M monitoring vCentrum VMWare. Default templates. I created dependent item by manual https://www.zabbix.com/documentation...nt-log-records (Match reg exp) BUT from this time isnt write any from vCentrum log! I deleted dependent Item BUT same isue! Not supported item and in detail: Too old events requested. I dont have any test zabbix for ask to same url. This problem started after i try create dependent item from manual. I see on ZBX-22754, this is same problem.
We canot work with vmware log and create dependent items from master item.
Comback to corect state and catch logs from VMWare i s restart Zabbix server!

Next I try reg exp .*Created virtual machine.* \0 - same error and block all capturing log from VMware - Too old events requested.
I dont undestand! This is Dependend item! Its query will be ask internal DB of ZBX not ask VMWare SDK. And generate this problems. I was tested preprocesing qury everiting looks good. When there will be any error test will be end with Information error. I cut and copy log data from latest data insert to value in preprocesing test and started test - OK output was only one line:"Created virtual machine X573VM on raga.domain.local, in town-DC1" But in production error and crashed.
Where can be problem on production data? (I ask in dependent item its ask local DB ZBX! Or NO?!) And why crashed with same error: Too old events requested PARENT item! And now it is in STATUS - Not supported!!! Why parent item?!
When I make same mistake in regexp Q crash only dependent item. In this case crash ALL LOG query to VMWare! Dependent AND PARENT Item. And resolution is delete dependent item and restar full zabbix server.
I try delete preprocesing in depended item. And set history to 1d. Item take data from master item and than crash both items master and depended.
This is my assumption that is BUG in Zabbix.