Zabbix : Reading Windows Event Logs in Zabbix

Channel:

SBCODE

Subscribers:

24,900

Published on August 23, 2020 7:58:10 AM ● Video Link: https://www.youtube.com/watch?v=cXvx88zBN6c

Category:

Vlog

Duration: 6:47

10,488 views

126

Documentation : https://sbcode.net/zabbix/items-windows-failed-logon/
Coupons : https://sbcode.net/coupons

In this example I create an advanced item that reads the windows event logs and looks for the a specific windows event id 4625 which is also known as 'failed logon'.

The item type is Zabbix Agent (Active)

and the key is
"eventlog[Security,,,,4625,,skip]"

The type of information is Log

The duration to keep the data and the frequency of checking for the item is up to you.

I then log onto my windows VM and generate some failed logins.

I then see the failed login events in the Latest Data screen.

#zabbix
#zabbix5
#zabbixCourse
#zabbixTutorial