NSClient++ Help (#1) - check_nrpe + CheckEventLog returns wrong Event (#431) - Message List

check_nrpe + CheckEventLog returns wrong Event

Hi,

when executing the following query:

check_nrpe -H $HOSTADDRESS$ -p $ARG1$ -c check_gen -a "CheckEventLog file = Application filter=in filter=all filter.eventSource = substr:MSExchangeIS_ Mailbox filter.eventType = =info filter+eventID==9688 filter-generated=>1d truncate=29 MaxCrit=1"

I sometimes receive false information. There is another Event which uses the same ID, but is from another source & category (MSSQL$BKUPEXEC - category (2))while the event which I'm looking for is (MSExchangeIS Mailbox - category General)

I'm trying to debug as soon as the event reappears but no one knows when that'll happen (I can't restart MSSQL so the event may reappear because it's a productive System).

If you have any suggestions regarding query-syntax I'd be thankful!

Regards, zkaerf

  • Message #1343

    Forgot to mention: I tried using %20 and 'MSExchangeIS Mailbox' aswell, no change happened.

    • Message #1344

      Ignore the commands above - the cmd I'm using is:

      check_nrpe -H $HOSTADDRESS$ -p $ARG1$ -c check_gen -a "CheckEventLog file=Application filter=in filter=all filter.eventSource=substr:MSExchangeIS_Mailbox filter.eventType==info filter+eventID==9688 filter-generated=>1d truncate=29 MaxCrit=1"

      o.O (missing edit button )

Subscriptions