Hi,

BUG:
====
Noticed that the Lastlogsize, source and severity was not updated on Zabbix Server for items Monitoring Windows Eventlog.
Investigating the source: active.c in routine process_value ( or even send_buffer) shows that the values are never send to the server!!!
Please correct!

ENHANCEMENT REQUEST (if possible):
=======================
could u enhance the regexp in Windows Eventlog to also search/match on the source and severity text.
This should not be a to big problem!

In the active.c source file from the zabbix_agent:
Subroutine: process_active_checks
add : char *regexpvalue = NULL;
change:

if (!pattern || NULL != zbx_regexp_match(value, pattern, NULL)) {
send_err = process_value(
server,
port,
CONFIG_HOSTNAME,
active_metrics[i].key,
value,
&lastlogsize,
&timestamp,
source,
&severity
);

to
/* concat severity, source and eventtext to one string to check */
>> regexpvalue = severity + " " + source + " " + value
/* or is it */
strcat(regexpvalue,severity)
strcat(regexpvalue,source)
strcat(regexpvalue,value)
>> if (!pattern || NULL != zbx_regexp_match(regexpvalue, pattern, NULL)) {
send_err = process_value( .....

Don't know if this concats works as I'm not a C programmer ( I can read the code but can't program, yet!).

Hope this can be done,

Greets & Thanx
Patrick

P.S. Is severity numeric here? this would not be helpfull as we want to filter on Error at teh agents level