What about using Negate plugin to revers the Critical to a OK? TOny (Author of NC_Net) <div class="gmail_quote">On Wed, May 7, 2008 at 12:52 AM, Stane <<a href="mailto:informacije@stane.org">informacije@stane.org</a>> wrote: <blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Hello all! I need a little help configuring Nagios (client?) to monitor (non) existence of a process on a windows box (explorer.exe for example). I'm using client v0.3.1 and Nagios v3.0.1 with plug ins v1.4.11 on Centos 5.1 server. My request (or wish :-)) is: OK condition: explorer.exe IS NOT running CRITICAL condition: explore.exe IS running (Note that normal condition should be NON running process). Check 1: - which I made locally on windows box: I run "nsclient++ /test" on windows box and enter: CheckProcState ShowAll explorer.exe=stopped I get next (good) answer: CRITICAL:CRITICAL: explorer.exe: started (critical) Check 1 gives next entries in NSC.log: debug:.\NSClient++.cpp:516: Injecting: CheckProcState: ShowAll, explorer.exe=stopped debug:.\NSClient++.cpp:536: Injected Result: CRITICAL 'CRITICAL: explorer.exe: started (critical)' Check 2: - which I made remotely from nagios server: I run next command: check_nt -H <a href="http://192.168.5.3/" target="_blank">192.168.5.3</a> -p 12489 -v PROCSTATE -l "explorer.exe=stopped" -d SHOWALL I get next (not ok) answer: explorer.exe: Running Check 1 gives next entries in NSC.log: debug:.\NSClient++.cpp:516: Injecting: checkProcState: ShowAll, explorer.exe=stopped, nsclient debug:.\NSClient++.cpp:536: Injected Result: OK 'explorer.exe: Running' (Where IP address <a href="http://192.168.5.3/" target="_blank">192.168.5.3</a> is my windows box). Using nsc log on windows box, I've found the difference between Check 1 and Check 2. It's is in injecting command. Check 2 has an additional ",nsclient" at the end of injecting line (without quotes). Unfortunately, I can't figure why there is ",nsclient" appearing in remote command and I don't know how to fix it. Please help. Thanks, Stane ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. <a href="http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone" target="_blank">http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone</a> _______________________________________________ Nagios-users mailing list <a href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null</blockquote></div>