Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-6933

Windows agent does not expand variables in eventlog message

    Details

    • Type: Incident report
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.0.8, 2.1.2
    • Fix Version/s: 2.0.12rc1, 2.2.3rc1, 2.3.0
    • Component/s: None
    • Labels:
    • Environment:
      Windows

      Description

      Windows agent does not expand variables like "%%258112" in eventlog message. This case no error message "The description for Event ID (...) in Source (...) cannot be found."

      For example:

      On Event Viewer : Diagnostics failure of 10: 'IO Power On' (Ftn=0xf040 Info=0x0,0x0)
      On Zabbix frontend: Diagnostics failure of 10: '%%258112' (Ftn=0xf040 Info=0x0,0x0)

      Exported Event XML from event viewer:

      Log Name: System
      Source: srabid
      Level: Error
      Description:
      Diagnostics failure of 10: 'IO Power On' (Ftn=0xf040 Info=0x0,0x0).
      Event XML:
      <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
      <Provider Name="srabid" />
      <Level>2</Level>
      <Task>0</Task>
      <Channel>System</Channel>
      <Security />
      </System>
      <EventData>
      <Data>
      </Data>
      <Data>10</Data>
      <Data>%%258112</Data>
      <Data>0xf040</Data>
      <Data>0x0</Data>
      <Data>0x0</Data>
      </EventData>
      </Event>

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              kodai Kodai Terashima
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: