Zabbix Server: 6.0.3
Agent2 6.0.3 on Windows.
Monitor windows event log file for a specific eventid. Take the value (log text) and format it with preprocessing.
Local time, Source, Severity, and Event ID are not showing after the preprocessing, unlike in previous versions.
Steps to reproduce:
- Create an item to monitor Eventlog using key such as eventlog[System,,,,70,,skip]
- Run the following commands with Windows PowerShell to reproduce a Log Event:
$evt = new-object System.Diagnostics.EventLog("System") $evt.Source = "MyEvent" $infoevent = [System.Diagnostics.EventLogEntryType]::Information $evt.WriteEntry("My Test Event",$infoevent,70)
- Check Generated log:
- Add Preprocessing (with Type of information set as Log) with Regular expression, and run the PS Script again to generate a new event with same ID:
ZBX-20855 eventlog with preprocessing loses extra fields