<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16890" name=GENERATOR></HEAD>
<BODY bgColor=#ffffff>
<DIV dir=ltr align=left><SPAN class=781234907-11092009><FONT face=Verdana
color=#0000ff size=2>Hi Allan,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=781234907-11092009><FONT face=Verdana
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=781234907-11092009><FONT face=Verdana
color=#0000ff size=2>Well after changing some lines in nsc.ini file ... now when
i run the command I am getting the below output.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=781234907-11092009><FONT face=Verdana
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=781234907-11092009><FONT face=Verdana
color=#0000ff size=2>"EvenlogBuffer is too small (set the value of buffer_size):
122: The data area passed to a system call is too small."</FONT></SPAN></DIV>
<DIV><SPAN class=781234907-11092009><FONT face=Verdana color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=781234907-11092009><FONT face=Verdana color=#0000ff
size=2>Please let me know hw to increase the buffer_size in nsc.ini ... i didnt
find any line for buffer_size in nsc.ini file.</DIV>
<DIV dir=ltr align=left><BR></DIV>
<DIV></FONT></SPAN> </DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=781234907-11092009>regards,</SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=781234907-11092009>Chethan M N</SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2></FONT> </DIV>
<DIV><BR></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> Allan Clark
[mailto:chickenandporn@gmail.com] <BR><B>Sent:</B> Friday, September 11, 2009
1:14 PM<BR><B>To:</B> Chethan M N (WI01 - Manage IT)<BR><B>Cc:</B>
<Nagios-users@lists.sourceforge.net><BR><B>Subject:</B> Re: [Nagios-users]
windows Eventlog alerts<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV>On Sep 11, 2009, at 7:39, <<A
href="mailto:chethan.mnc@wipro.com">chethan.mnc@wipro.com</A>>
wrote:<BR><BR></DIV>
<DIV></DIV>
<BLOCKQUOTE type="cite">
<DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009>Dear all,</SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009></SPAN></FONT> </DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN class=281473406-11092009>I
have installed Nagios 3 on Rhel 5. I am trying to monitor error and
warning alerts on the windows evenlog.</SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN class=281473406-11092009>I
have NS Client++ running on the windows machine.</SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009></SPAN></FONT> </DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009>Now When I run the command </SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009></SPAN></FONT> </DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009>/usr/local/nagios/libexec/check_nrpe -H
1<IPADDR> -p 5666 -c checkEventLog<BR>Eventlog check
ok</SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009></SPAN></FONT> </DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN class=281473406-11092009>It
works fine but how to get the alerts description for warning and error alerts
from eventlog(application & system).</SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009></SPAN></FONT> </DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009></SPAN></FONT> </DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN class=281473406-11092009>I
came across this command with arguments on
Google,</SPAN></FONT></DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009></SPAN></FONT> </DIV>
<DIV><FONT face=Verdana color=#0000ff size=2><SPAN
class=281473406-11092009>/usr/local/nagios/libexec/check_nrpe
-H <IPADDR> -p 5666 -c checkEventLog -a file=applicaion
warning-count=1 critical-count=3 filter-generated=\>4h
filter-eventType=\>warning truncate=1000 filter=out<BR>CHECK_NRPE: Received
0 bytes from daemon. Check the remote server logs for error
messages.</SPAN></FONT></DIV></DIV></BLOCKQUOTE>
<DIV><BR></DIV>When you "checked the remote server logs for error messages",
what did it say?
<DIV><BR></DIV>
<DIV>Allan</DIV></BODY></HTML>