[ZBX-7155] Active Item eventlog with skip option enabled report no one event (also new rows) Created: 2013 Oct 15  Updated: 2017 May 30  Resolved: 2013 Oct 15

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Agent (G)
Affects Version/s: 2.0.8
Fix Version/s: None

Type: Incident report Priority: Critical
Reporter: yayo Assignee: Unassigned
Resolution: Won't fix Votes: 0
Labels: active, agent, eventlog
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Zabbix 2.0.8 server/agent and Windows monitored server (from 2003)



 Description   

We are tring to use eventlog to check eventlog "Application" and "System" and report problems (Error level). We have configured item like this:

eventlog[Application,,Error,,,100,skip]

Agent is configured with this parameters:

ServerActive=zabbix01,proxy01
BufferSend=90
BufferSize=1000
RefreshActiveChecks=3600

Trigger associated with item is:

{windows-basicschecks:eventlog[Application,,Error,,,100,skip].logseverity(0)}

=4 &

{windows-basicschecks:eventlog[Application,,Error,,,100,skip].nodata(180)}

=0

And an action (with multiple error report) that send a mail when trigger fireup ...

When we apply template (windows-basicschecks) with eventlog item, zabbix doesn't sent any new data but new rows are created in Application log.

We have made many many test, and last test is this:

  • stop agent
  • cleanup template (unlink and clear)
  • cleanup evenlog Application
  • item is: eventlog[Application,,Error,,,100,skip]
  • Created some new rows in Application eventlog
  • start agent
  • Applied template with modified item
  • Created new rows in Application eventlog

AGENT REPORT NOTHING!

For us this is a bug ... can you confirm?



 Comments   
Comment by richlv [ 2013 Oct 15 ]

again, please use zabbix forums and irc for community support.

in this case, add new data to the log after agent startup.

Generated at Fri Apr 19 02:44:23 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.