[ZBXNEXT-2938] additional functions for the eventlog. Created: 2015 Sep 02 Updated: 2017 Mar 09 |
|
| Status: | Open |
| Project: | ZABBIX FEATURE REQUESTS |
| Component/s: | Server (S) |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | New Feature Request | Priority: | Trivial |
| Reporter: | Kazuo Ito | Assignee: | Unassigned |
| Resolution: | Unresolved | Votes: | 3 |
| Labels: | expressions, newtriggerfunction, trigger | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Description |
|
I would be happy to be able to process eventlog in one function because its conditional expressions are long. item: eventlog[Application,,Error,,,,skip] Current conditional expressions: eventlog\[Application,,Error,,,,skip].logeventid(100)=0&eventlog\[Application,,Error,,,,skip].logsource("AAA")=0| eventlog\[Application,,Error,,,,skip].logeventid(200)=0&eventlog\[Application,,Error,,,,skip].logsource("BBB")=0| eventlog\[Application,,Error,,,,skip].logeventid(300)=0&eventlog\[Application,,Error,,,,skip].logsource("CCC")=0| eventlog\[Application,,Error,,,,skip].logeventid(400)=0&eventlog\[Application,,Error,,,,skip].logsource("DDD")=0 Proposed changes of the conditional expressions: eventlog\[Application,,Error,,,,skip].func(id=100,source="AAA")=0| eventlog\[Application,,Error,,,,skip].func(id=200,source="BBB")=0| eventlog\[Application,,Error,,,,skip].func(id=300,source="CCC")=0| eventlog\[Application,,Error,,,,skip].func(id=400,source="DDD")=0 I hope to specify the severity as well.
func(id=xxx,source="xxx",severity=x)
|
| Comments |
| Comment by Oleksii Zagorskyi [ 2015 Sep 02 ] |
|
Actually it could be applicable not to eventlog[] items only. Any item type could get benefits for suggested trigger functions syntax. |
| Comment by Kazuo Ito [ 2015 Sep 05 ] |
|
I also agree with that. My first thought was to use collectively the three "eventid" / "source" / "severity" in the conditional expressions of eventlog. However, it is exactly as it was written by you. |
| Comment by Kim Jongkwon [ 2017 Feb 28 ] |
|
I believe that this new feature will be useful. eventlog is slightly difficult to exclude of multiple parameters now. |