Agent crashes when processing eventlogs

[Niels]

I'm running a 1.4.2 agent on a Windows 2003 machine. I've made items for the eventlogs, and this works fine, until the agent crashes. Clearly, the amount of logging causes the agent to crash.

[marc]

little off topic..
iam using eventlog monitoring on 20 boxes so far and cannot verify your thoughts but as a little suggestion..
if you start eventlogging for the first time, save&clear all your logs first.
windows has no logrotation by default so you might have logs about the last years .. zabbix will need weeks to get them submitted to server (remember, its always just sending 10 lines in one active check action)

[Niels]

Maybe you're right -- I'm now monitoring a smaller log, and so far the agent isn't crashing.

However: It really shouldn't crash. Ever. If there's a lot of data to transmit, maybe a faulty program is filling the log, and that's exactly what I want to monitor.

Thanks

[marc]

what exactly are you monitoring? please paste keys and zabbix_agentd.conf.
maybe you have an other problem.
check agent conf for right new lines e.g.

[Niels]

Keys are "eventlog[system]", "eventlog[application]" and "eventlog[security]". They work fine until the agent crashes.

I fail to see how newlines in the conf could matter. It's working, transmitting data fine. The above mentioned logs get through.

[Alexei]

Does it happen on Windows 2003 servers only?

[Niels]

Does it happen on Windows 2003 servers only?

That's a fairly good guess. The server in question was certainly a win 2003. But I've been monitoring the eventlog on other win2003 machines without similar crashes.