Item Preprocessing with Regex in Zabbix | Zabbix-6 | Lesson 25
In this lecture, I add a pre-processing step to the item that instructs the agent to read the windows failed logon events.
The regular expressions demonstrated in this video are,
Regex Output Description
(.*) \0 Returns only the first line of the complete failed logon event text.
Account Name:\t\t(.*) \1 Returns the 1st occurrence of the Account Name in the log text, that created the event.
Account Name:(.|\n)*\tAccount Name:\t\t(.*) \2 Returns the 2nd occurrence of the Account name in the log that created the event.
---------------
Regex101.com is an interactive regular expression console that lets you debug your expressions in real-time. What this means is that you can build your expressions and see how it affects a live data set all in one screen at the same time.
#zabbix
#OnlineITEducation
#OnlineEducation
#ITEducation