Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-2837

Zabbix Agent identifies incorrectly the EVENT SOURCE from new eventing system log "Windows Eventing 6.0"

XMLWordPrintable

    • Icon: Incident report Incident report
    • Resolution: Won't fix
    • Icon: Major Major
    • None
    • 1.9.0 (alpha)
    • Agent (G)
    • newest version of Windows (windows 7, 2008 server, maybe Vista also)

      For me it is not yet a problem, but I decided to publish it with the greatest variety of examples that would have had in mind was once and can be corrected.

      I made two series of screenshots from Windows 7 (same as a 2008 server) for clarity.
      I tried to capture the maximum detail for analysis.
      Briefly describe the problems were noticed:

      • For many events at the beginning of the text is appended text "Microsoft-windows-" ("Microsoft-windows-Kernel-Power"). This is probably a special case of the next situation;
      • Some are determined entirely from another undisclosed location ("DNS client Events").
      • The source is not taken from the correct place and does not coincide with the original name in Windows ("Windows Media Player Network Sharing Service").

      Perhaps this problem should be considered together with ZBX-2008

        1. 1.1.win7_event_source.png
          87 kB
          Oleksii Zagorskyi
        2. 1.2.win7_event_source.png
          98 kB
          Oleksii Zagorskyi
        3. 1.3.win7_event_source_in_Zab.png
          30 kB
          Oleksii Zagorskyi
        4. 2.1.win7_event_source.png
          97 kB
          Oleksii Zagorskyi
        5. 2.2.win7_event_source_in_Zab.png
          16 kB
          Oleksii Zagorskyi
        6. 3.1.win7_event_source_Filtering_names.png
          62 kB
          Oleksii Zagorskyi

            Unassigned Unassigned
            zalex_ua Oleksii Zagorskyi
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: