We are tring to use eventlog to check eventlog "Application" and "System" and report problems (Error level). We have configured item like this:

eventlog[Application,,Error,,,100,skip]

Agent is configured with this parameters:

ServerActive=zabbix01,proxy01
BufferSend=90
BufferSize=1000
RefreshActiveChecks=3600

Trigger associated with item is:

{windows-basicschecks:eventlog[Application,,Error,,,100,skip].logseverity(0)}

=4 &

{windows-basicschecks:eventlog[Application,,Error,,,100,skip].nodata(180)}

=0

And an action (with multiple error report) that send a mail when trigger fireup ...

When we apply template (windows-basicschecks) with eventlog item, zabbix doesn't sent any new data but new rows are created in Application log.

We have made many many test, and last test is this:

• stop agent
• cleanup template (unlink and clear)
• cleanup evenlog Application
• item is: eventlog[Application,,Error,,,100,skip]
• Created some new rows in Application eventlog
• start agent
• Applied template with modified item
• Created new rows in Application eventlog

AGENT REPORT NOTHING!

For us this is a bug ... can you confirm?