nrpe CheckEventLog

[Mark Elsen]

On Wed, Feb 16, 2011 at 1:38 PM, Tristan Drinkwater
<tristand at micro-p.com> wrote:
> Hi guys,
>
> I hope someone can help me.
>
> I'm trying to set up Nagios to return a warning for all red error logs in both the system and application logs on a windows 2003 server.
>
> So far no matter what I try I always get 'Eventlog Check ok' even when I know that there are some red error's showing in the log.
>
> I've just been running this from the libexec folder so far as I what to get the syntax right before defining the service and alike.
>
> ./check_nrpe -H IP -p 5667 -c checkEventLog file=application file=system filter-eventType==error filter-generated=\<1d
>
>
> Any ideas anyone?
>
> NSclient 3.3.20 installed on windows machine.
>
>
> Can someone provide a simple syntax that will at least produce something more interesting the 'ok' so I know that's it is possible? At the moment I'm thinking it's stuck at only reporting 'ok' no matter what I do.
>

  Ah, the ole-dead-thing, isn't working as it is supposed too case :-).

  Usually this  means that something is overlooked , or there is a
knowledge-gap in corrrect usage of the needed tool ;
  Some things to remark :

             - normally in your example command the  '-a' flag should
appear after checkEventLog to denote arguments following (I think)
             - in the NSC config file on the remote host, support for
arguments must be , explicitly enabled, as also support for nasty meta
chars (I think)
             - further I would advice to make tests against the
lastest version of NSClient 0.3.8..x , because the syntax changed
somewhat, and
this can influence  behavior, pending your are looking at links with
correct examples w.r.t to the version of NSClient used , or not.

M.

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null