LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 10-05-2010, 03:49 AM   #1
centosboy
Senior Member
 
Registered: May 2009
Location: london
Distribution: centos5
Posts: 1,137

Rep: Reputation: 116Reputation: 116
using nsclient++ with nrpe to monitor event logs


Could someone with good experience of monitoring windows event logs with nrpe or check_nt + nsclient++ give me some good examples of the above.
I do have this working, but some of the checks appear inconsistent.


An example being

Code:
./check_nrpe -H 10.222.203.151  -c CheckEventLog -a filter=new file="Security" MaxWarn=1 MaxCrit=2 filter-generated=\<2d  filter+eventType==Information filter=in filter=all truncate=400 unique descriptions
Eventlog check ok|'eventlog'=0;1;2;
I just cant seem to get this particular check correct.


Which should really be showing as CRITICAL
 
Old 10-05-2010, 11:05 AM   #2
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,824
Blog Entries: 15

Rep: Reputation: 1667Reputation: 1667Reputation: 1667Reputation: 1667Reputation: 1667Reputation: 1667Reputation: 1667Reputation: 1667Reputation: 1667Reputation: 1667Reputation: 1667
It might not be "consistent" because you're checking updates to the log. The first time you check it the return code is 3 (CRITICAL) but the next one after that (unless there's a new message) is going to have return code 0 (OK).

To see return code just type "echo $?" after executing what you have at command line on your master. (Saves time over waiting for Nagios to get to it.)

Last edited by MensaWater; 10-05-2010 at 11:07 AM.
 
Old 10-06-2010, 02:18 AM   #3
centosboy
Senior Member
 
Registered: May 2009
Location: london
Distribution: centos5
Posts: 1,137

Original Poster
Rep: Reputation: 116Reputation: 116
Quote:
Originally Posted by MensaWater View Post
It might not be "consistent" because you're checking updates to the log. The first time you check it the return code is 3 (CRITICAL) but the next one after that (unless there's a new message) is going to have return code 0 (OK).

To see return code just type "echo $?" after executing what you have at command line on your master. (Saves time over waiting for Nagios to get to it.)
This is not correct. This is how it works for checking logs on a unix type box.
I am talking about the windows event logs here.
Do you have any examples? There are some on the nsclient++ site, but these do not work right for me. I do not really want to use the nsca method either.....
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Nagios Event Handler not running - NRPE: Unable to read output notque Linux - Software 7 04-05-2013 06:27 AM
Installing Nagios agent nrpe, problems following nrpe install steps rfreiberger Linux - Newbie 3 04-19-2010 08:43 AM
How to monitor the cluster failover event matyu Linux - Enterprise 0 09-16-2009 05:48 PM
collecting windows event logs on a linux server kav Linux - Software 1 06-22-2007 03:28 PM
RH 8.0 - Event Logs ddzc Linux - Software 2 04-09-2007 11:56 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 06:00 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration