https://wiki.cless.pro/index.php?action=history&feed=atom&title=Zabbix._Task._Windows_LOG_EVENTS_monitoringZabbix. Task. Windows LOG EVENTS monitoring - История изменений2026-10-22T22:44:36ZИстория изменений этой страницы в викиMediaWiki 1.36.2https://wiki.cless.pro/index.php?title=Zabbix._Task._Windows_LOG_EVENTS_monitoring&diff=1689&oldid=prevCless: Новая страница: «= Description = Zabbix Windows Eventlog monitoring at the Windows host<blockquote>As example, the fact of Windows OS boot</blockquote> = Configuring = == At the...»2023-10-07T08:33:56Z<p>Новая страница: «= Description = Zabbix Windows Eventlog monitoring at the Windows host<blockquote>As example, the fact of Windows OS boot</blockquote> = Configuring = == At the...»</p>
<p><b>Новая страница</b></p><div>= Description =<br />
Zabbix Windows Eventlog monitoring at the Windows host<blockquote>As example, the fact of Windows OS boot</blockquote><br />
<br />
= Configuring =<br />
<br />
== At the Windows host ==<br />
Zabbix-agent<br />
<br />
<code>C:\ZA\conf\zabbix_agentd.conf</code><br />
...<br />
Server=192.168.166.149<br />
...<br />
ServerActive=192.168.166.149<br />
...<br />
Hostname=tmb_windows_17-77 # At the Zabbix-server there MUST be the same name of the Host in the Web-interface. HOSTNAME of this system can be different<br />
...<br />
Restart ZA service<br />
<br />
== At Zabbix-server ==<br />
Create host "'''tmb_windows_17-77'''"<blockquote>At the Windows host in ZA config there MUST be the same name ('''Hostname=...''')</blockquote>Create Item<blockquote>For example, we need to get only logs with '''eventId 6005''' (this is the fact of the Log Service running, and it means Windows OS boot)</blockquote>'''Name''': "Log of the system boot"<br />
<br />
'''Type''': Zabbix agent (active)<br />
<br />
'''Key''': eventlog[System,,,,6005,,] '''# eventlog[System,,,,,,] - all events will be logged'''<br />
<br />
'''Type of information''': Log<br />
<br />
'''Update interval''': 1m<br />
<br />
= Test =<br />
Reboot Windows host for 2 times, we will get in the '''Latest data''' of the '''tmb_windows_17-77''' Host:<br />
04/24/2022 04:07:20 PM 03/04/2022 11:56:43 AM EventLog Information 6005 Запущена служба журнала событий.<br />
04/24/2022 04:06:02 PM 02/24/2022 01:50:07 PM EventLog Information 6005 Запущена служба журнала событий.<br />
[[Категория:Zabbix]]<br />
[[Категория:Windows]]<br />
__ОБЯЗАТЕЛЬНОЕ_ОГЛАВЛЕНИЕ__<br />
__БЕЗ_РЕДАКТИРОВАНИЯ_РАЗДЕЛА__</div>Cless