<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:#1F497D}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">I’m using check_mk to monitor eventlogs (and do other good things).</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"><a href="http://mathias-kettner.de/checkmk.html">http://mathias-kettner.de/checkmk.html</a></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Cheers,</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Phil</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#1F497D">--</span><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">
</span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt; font-family:"Arial","sans-serif"; color:black">Phil Randal</span></b></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt; font-family:"Arial","sans-serif"; color:black">Infrastructure Engineer</span></b><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"><br>
</span><b><span style="font-size:11.0pt; font-family:"Arial","sans-serif"; color:#00829B">Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT</span></b><span style="font-family:"Calibri","sans-serif"; color:#00829B"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Arial","sans-serif"; color:#00829B">Tel: 01432 260415 | Email: phil.randal@hoopleltd.co.uk</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> Mark Elsen [mailto:mark.elsen@gmail.com]
<br>
<b>Sent:</b> 24 February 2012 16:32<br>
<b>To:</b> Nagios Users List<br>
<b>Subject:</b> Re: [Nagios-users] Eventlog monitoring through NSClient++</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal" style="margin-bottom:12.0pt"> </p>
<div>
<p class="MsoNormal">On Fri, Feb 24, 2012 at 4:11 PM, MAD <<a href="mailto:mad@b-care.net">mad@b-care.net</a>> wrote:</p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Hi list,<br>
<br>
I was trying to monitor events on a Windows server through the<br>
CheckEventLog functionnality built in NSClient++.<br>
<br>
I didn't notice first while I was adding my checks but memory usage and<br>
cpu load started raising as I was asking for more and more checks. When<br>
I finished adding my 40 rules, my server crashed because of lack of memory.<br>
<br>
Have someone already seen something similar ? What other tool may I use<br>
to check large amounts of events on windows boxes without making them<br>
crashes ?<br>
<br>
I'm using check_nrpe v2.12 and NSClient++ v0.3.9</p>
<div>
<p class="MsoNormal"><br>
- Checkwmiplus can also query evenlogs , it may perform better (or not....) :<br>
<br>
<a href="http://www.edcint.co.nz/checkwmiplus/">http://www.edcint.co.nz/checkwmiplus/</a><br>
<br>
M. </p>
</div>
</div>
</div>
“Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended
solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing
or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it.
</body>
</html>