[ZBX-13409] Log file monitoring - there are no files matching or insufficient access rights on Windows 2008 r2 Created: 2018 Jan 29  Updated: 2018 Mar 19  Resolved: 2018 Mar 19

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Agent (G)
Affects Version/s: 3.4.6
Fix Version/s: None

Type: Incident report Priority: Major
Reporter: José Roberto Prado Assignee: Unassigned
Resolution: Cannot Reproduce Votes: 0
Labels: logmonitoring, logrt
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Windows 2008 R2 Standard

Attachments: PNG File Item config.png    

 Description   

I'm trying monitoring a file log on with active agent in Windows 2008 R2 Standard but I'm receiving this message on log:

"there are no files matching "SON20180125.log" in "D:\DIR\TRACE\" or insufficient access rights"

Steps to reproduce:
1- Item config:
Type: Zabbix agent (active)
Key: logrt[D:\DIR\TRACE\SON20180124.log,Bloqueada]

2- The permission of file on Windows:
[root@zabbixsrv]# zabbix_get -s 10.3.0.XXX -p 10050 -k "system.run[icacls D:\DIR\TRACE\SON20180125.log]"
D:\DIR\TRACE\SON20180125.log Everyone:(I)(RX)
NT AUTHORITY\SYSTEM:(I)(F)
BUILTIN\Administrators:(I)(F)
Successfully processed 1 files; Failed processing 0 files

3- Test of read the file log from remote command with success:
[root@zabbixsrv]# zabbix_get -s 10.3.0.XXX -p 10050 -k "system.run[type D:\DIR\TRACE\SON20180125.log |findstr Bloqueada]"
[25/01/2018-20:00:52] SON[000059FC] XXX Bloqueada

4- Error in log file of zabbix agent:
5620:20180129:090432.842 there are no files matching "SON20180125.log" in "D:\DIR\TRACE\" or insufficient access rights

 Comments   
Comment by José Roberto Prado [ 2018 Jan 29 ]

Additional information:

[root@zabbixsrv]# zabbix_get -s 10.3.0.XXX -p 10050 -k "system.run[c:\zabbix\zabbix_agentd.exe -V]"
zabbix_agentd Win64 (service) (Zabbix) 3.2.0
Revision 62444 13 September 2016, compilation time: Sep 12 2016 15:28:10

[root@zabbixsrv]# zabbix_server -V
zabbix_server (Zabbix) 3.4.6
Revision 76823 15 January 2018, compilation time: Jan 15 2018 09:16:20

Comment by Aleksejs Petrovs [ 2018 Mar 01 ]

Hello Jose,

I've noticed that you have an incorrect path - D:DIR\TRACE\SON20180125.log so probably you've missed a \ symbol inside the first parameter.

Regards,
Aleksejs!

Comment by José Roberto Prado [ 2018 Mar 01 ]

Hi Aleksejs,

It was just a typo in the image because I modified the path to open the ticket. As you can see in the log the path is correct. D:\DIR\TRACE\SON20180125.log.

Comment by Aleksejs Petrovs [ 2018 Mar 02 ]

Hmm, I'm trying to reproduce the issue, but can't. From which user you are running Zabbix Agent?

Regards,
Aleksejs!

Comment by Aleksejs Petrovs [ 2018 Mar 07 ]

Hello Jose,

Any updates? So far the issue isn't reproducible from my side.

Regards,
Aleksejs!

Comment by José Roberto Prado [ 2018 Mar 07 ]

Hi Aleksejs,

sorry for the wait, the zabbix agent run as windows service by the user SYSTEM.

Comment by Kaspars Mednis [ 2018 Mar 09 ]

Hi Jose,

Still unable to reproduce your issue. Are you sure the file exists in that directory with the correct name ?
Why you are using logrt key, not log key ?
Is there a new log file generated every day using date as a part of file ?

Regards,
Kaspars

Comment by José Roberto Prado [ 2018 Mar 19 ]

Hi guys,

Sorry for that, after change windows permissions on servers the issue gone away. Now the item work normal! I use logrt because have rotation of my log. My config item is logrt[D:\DIR\TRACE\SON[0-9]

{8}

.log,Bloqueada]. i will close this ticket.

Thank you for your attention and promptness.

Comment by José Roberto Prado [ 2018 Mar 19 ]

Hi guys,

Sorry for that, after change windows permissions on servers the issue gone away. Now the item work normal! I use logrt because have rotation of my log. My config item is ogrt[D:\DIR\TRACE\SON[0-9]

{8}

.log,Bloqueada]. i will close this ticket.

Thank you for your attention and promptness.

Generated at Mon Apr 07 21:01:51 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.