Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-21368

Item eventlog with preprocessing loses the attributes Local time, Source, Severity, and Event ID in latest data

    XMLWordPrintable

Details

    • Problem report
    • Status: Confirmed
    • Trivial
    • Resolution: Unresolved
    • 6.0.6, 6.2.0
    • None
    • Server (S)
    • None

    Description

      Steps to reproduce:

      1. Create an eventlog item for Windows. Incoming events are correct for now in latest data.
      2. Add preprocessing to this item.
      $AUTH.LOG.ALLOW = '.+'    # Any
      $AUTH.LOG.DENY  = '(?!)'  # Nothing
      

      Result:

      In latest data the attributes Local time, Source, Severity, and Event ID are empty. Although the content is not even changed or overwritten by the RegEx, instead it is only checked for validity. Nevertheless, this seems to have an impact on these additional attributes.


      Expected:
      The attributes Local time, Source, Severity, and Event ID should remain available despite preprocessing.

      Attachments

        Activity

          People

            zabbix.dev Zabbix Development Team
            Taikocuya Marcel Renner
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated: