S
S
sflyer2016-08-31 07:44:10
Zabbix
sflyer, 2016-08-31 07:44:10

Eventlog[Application,,,] running on Windows Server 2012R2?

Created a data item to monitor the application log. Key eventlog[Application,,,]. Under Windows Server 2008R2 works without problems. But under Windows Server 2012R2, the data does not go.
How to pull application logs from Windows Server 2012r2 now.
Data is received on the server and client, judging by the logs at level 4, but there is no data in the web interface.
Example:

{	"host":"fs01",
      "key":"eventlog[Application,,,]",
      "value":"Выполняется запуск службы защиты программного обеспечения.\r\nПараметры:caller=ServerManager.exe",
      "lastlogsize":267974,
      "timestamp":1467601529,
      "source":"Microsoft-Windows-Security-SPP",
      "severity":1,
      "eventid":900,
      "clock":1472635414,
      "ns":445634387},

Answer the question

In order to leave comments, you need to log in

1 answer(s)
S
sflyer, 2016-09-01
@sflyer

Issue resolved for 2012r2.
1) use full name in hostname (name.domain.local) and use DNS name lookup in Zabbix
2) enable UnsafeUserParameters=1
3) if the host already existed, you need to recreate it.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question