Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-21071

Local time, Source, Severity, and Event ID are not showing after preprocessing of Eventlog

XMLWordPrintable

    • Icon: Problem report Problem report
    • Resolution: Duplicate
    • Icon: Trivial Trivial
    • None
    • 6.0.3
    • Server (S)
    • None

      Zabbix Server: 6.0.3
      Agent2 6.0.3 on Windows.

      Monitor windows event log file for a specific eventid. Take the value (log text) and format it with preprocessing.
      Local time, Source, Severity, and Event ID are not showing after the preprocessing, unlike in previous versions. 

      Steps to reproduce:

      1. Create an item to monitor Eventlog using key such as eventlog[System,,,,70,,skip]
      2. Run the following commands with Windows PowerShell to reproduce a Log Event:
      $evt = new-object System.Diagnostics.EventLog("System")
      $evt.Source = "MyEvent"
      $infoevent = [System.Diagnostics.EventLogEntryType]::Information
      $evt.WriteEntry("My Test Event",$infoevent,70) 
      1. Check Generated log:
      2. Add Preprocessing (with Type of information set as Log) with Regular expression, and run the PS Script again to generate a new event with same ID:

      Result:

      Expected:

            zabbix.dev Zabbix Development Team
            vcredidio Victor Breda Credidio
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: