check_nt EventLog regex

[Anthony Montibello]

Take out the extra quotes and try it again

"Application, error,1440,1,"Backup exec",0,0"
"Application, error,1440,1,Backup exec,0,0"
Since it is Comma delimited it does not need the extra quotes

Also please use EVENTLOG_NEW if posible since it is more efficient.
However it uses a slightly different syntex


Tony (Author of NC_NEt)

On Dec 17, 2007 5:55 AM, Ronan REYNAUD <R.REYNAUD at omr.fr> wrote:

> Hi
>
> I've set Nc_Net on a 2003server, and I can read the Application Log
>  From my nagios-server :
>   ./check_nt -H 192.168.x.X  -s "None"  -v EVENTLOG -w 1 -c 2 -l
> "Application, error,1440,0,0,0"
>
> .. and I get my results, every errors within 1440 mn. OK.
>
>
> I want only some errors based on the Event Source (ie  WINSCTRS  or
> Backup Exec ), and I tried to use the filter :
>   ./check_nt -H 192.168.x.X  -s "None"  -v EVENTLOG -w 1 -c 2 -l
> "Application, error,1440,1,"Backup exec",0,0"
>
> .. then I get "no error" (But I know there are errors)
>
> I guess I should use some regexp, but can't figure how to write them.
> (I tried many search in the documentation and on the web, with no luck)
>
> Any clue, please ?
>
> Thanks
>
> Ronan
>
> -------------------------------------------------------------------------
> SF.Net email is sponsored by:
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services
> for just about anything Open Source.
>
> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20071217/2b83de9c/attachment.html>
-------------- next part --------------
-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null