# NSClient++ Help (#1) - Checking for old Files (#443) - Message List

Checking for old Files

Hi,

I need to check if there are certain files in a directory which are older then 1 hour. I'm using ChecFfile2 with following syntax:

./check_nrpe -H 172.18.15.101 -c CheckFile2 -a file="n:\\spooler\\mailbox" pattern="*.bit" filter-written=\>"2h"


The result is always "CheckFile ok|'no files found'=0;0;0;", even if there are Files with *.bit older then 2 hours.

The logfile of nsclient shows this:

2009-08-21 10:45:17: debug:NSClient++.cpp:1034: Injecting: CheckFile2: file=n:\spooler\mailbox, pattern=*.bit, filter-written=>2h
2009-08-21 10:45:17: debug:modules\CheckDisk\CheckDisk.cpp:112: Input is: n:\spooler\mailbox / ffffffff
2009-08-21 10:45:17: debug:modules\CheckDisk\CheckDisk.cpp:126: File pattern: n:\spooler\mailbox\*.bit
2009-08-21 10:45:17: debug:modules\CheckDisk\CheckDisk.cpp:136: File pattern: n:\spooler\mailbox\*.*
2009-08-21 10:45:17: debug:include\checkHelpers.hpp:758: Missing bounds for maxmin-bounds check: no files found
2009-08-21 10:45:17: debug:NSClient++.cpp:1070: Injected Result: OK 'CheckFile ok'
2009-08-21 10:45:17: debug:NSClient++.cpp:1071: Injected Performance Result: ''no files found'=0;0;0; '


Am I using a wrong syntax, or is there a bug in CheckFile? Could anyone please help me?

Thanks,

Benjamin

• Message #1378

You need bounds as well:

Missing bounds for maxmin-bounds check: no files found


MaxWarn and MaxCrit (or min)

Michael Medin

• Message #1379

Hi,

i already tried using bounds like MaxCrit=1, but it still doesn't works. It seems as CheckFile doesn't recognize any files in the directory.

Benjamin

• Message #1380

BTW, which version?

CheckDisk 0.3.6 is "broken" (try the dll from the nightly)

Michael medin

• Message #1381

Hi,

I tried several versions. Right now I'm using Version 0.3.6.818 2009-06-14 on Windows 2003 Server.

• Message #1382

Now I tried the Checkdisk.dll from the nightly build but it didn't work too.

• Message #1383

Give me the full command you use and I shall look into it tonight...

Michael Medin

• Message #1384

Hello,

right now I'm testing with following commands:

./check_nrpe -H 172.18.15.101 -c CheckFile2 -a path="n:\\spooler\\mailbox" pattern="*.bit" MaxCrit="1"
./check_nrpe -H 172.18.15.101 -c CheckFile2 -a file="n:\\spooler\\mailbox" pattern="*.bit" MaxCrit="1"
./check_nrpe -H 172.18.15.101 -c CheckFile2 -a path="n:\\spooler\\mailbox" pattern="*.bit" MaxCrit="1" filter-written=\>"2h"
./check_nrpe -H 172.18.15.101 -c CheckFile2 -a file="n:\\spooler\\mailbox" pattern="*.bit" MaxCrit="1" filter-written=\>"2h"


Thankyou,

Benjamin

• Message #1405

The problem here is the "-" means "remove those files".

I need to write the docs for this I kkow :)

It works like eventlog: so: + = "add"

• = "remove"

. = "keep"

sorry for not catching it sooner...

CheckFile2 path=c:\test pattern=*.txt MaxCrit=1 filter+written=gt:2h


Michael Medin

• Message #1412

Hi Michael,

thanks for your help. Unfortunally it is still not working :( I'm using the newest nightly build (20090830-2237).

I' tried following commands:

./check_nrpe -H 172.18.15.101 -c CheckFile2 -a path=n:\\spooler\\mailbox pattern=*.BIT MaxCrit=1 filter+written=\>2h
./check_nrpe -H 172.18.15.101 -c CheckFile2 -a path=n:\\spooler\\mailbox pattern=*.BIT MaxCrit=1 filter+written=gt:2h


Regards,

Benjamin

• Message #1438

It works splendidly for me (adding filter=out or in):

CheckFile2 filter=in path=C:\test\ pattern=*.txt MaxCrit=1 filter+written=>2h
CRITICAL:001.txt, 002.txt, 003.txt, 001.txt, 002.txt, ...: 3 > critical|'001.txt, 002.txt, ...'=3;0;1;

CheckFile2 filter=in path=C:\test\ pattern=*.txt MaxCrit=1 filter+written=<2h
CRITICAL:003.txt, 005.txt, 003.txt, 005.txt: 2 > critical|'003.txt, 005.txt'=2;0;1;


Only thing which bothers me is that the names end up in the result list twice but the counters are all correct.

MickeM

• Message #1439

Hello Michael,

thanks for your help. Right now I just realized that CheckFile2 is working when I'm checking Files on a local harddisk. Bur I need to check files on a (mapped) network drive. I already tried other network drives mapped to this server, but it seems that CheckFile doesn't finds any files.

Benjamin

• Message #1440

Hello,

It seems that checkFile2 (nsclient 0.3.7.344 2009-09-20) is also not working with file on a mounted iso (daemon tool) : If I try to check file on local disk, it works fine, but if I try with a mounted iso, nsclient just stop working and quit :

input :

/usr/lib/nagios/plugins/check_nrpe -H XXXX -c CheckFile2 -a file="h:" pattern="*.exe" MaxCrit=1 filter+size=\>0


output on nsclient console (launch with /test):

d NSClient++.cpp(1066) Injecting: CheckFile2: file=h:, pattern=*.exe, MaxCrit=1,
filter+size=>0
d \CheckDisk.cpp(116) Input is: h: / 11
d \CheckDisk.cpp(131) File pattern: h:\*.exe
d \CheckDisk.cpp(632) result: 1 -- 1
C:\Program Files\NSClient++>


Thanks for any tip.

• Message #1447

Is there any way to check mapped filesystems or UNC-paths? This is hopefully last issue of mine.

My test does work when the directory is in C:\, but not in Z:\, which is the mapped
foo\bar.

• Message #1456

Since I had timeline to do this check I created it using LUA. C: is mapped filesystem.

nscp.register('check_file_age', 'init_check_wrapper')
function init_check_wrapper (command)
if check_age() == 1 then
return 'ok', 'Material has been under 12 hours in work-directory.'
else
return 'crit', 'Material has been over 12 hours in work-directory'
end
end
function check_age (command)
current_date = os.time()
-- starts program in a separated process and returns a file handle that you can use to read data from
-- io.popen is system dependent, but should work in POSIX and Windows
stream = io.popen("dir /TC /OD C:\\foo\\bar*","r")
for line in stream:lines() do
if line:match("(%d%d).(%d%d).(%d%d%d%d)") ~= nil then
day, month, year = string.match(line,"(%d%d).(%d%d).(%d%d%d%d)")
date_of_directory = os.time{year=(year),month=(month),day=(day)}
diff = os.difftime(current_date, date_of_directory)
minutes_in_directory = diff / 60
hours_in_directory = minutes_in_directory / 60
if hours_in_directory < 12 then
return 1
else
return 0
end
end
end
end

• Message #1461

Interesting to see you solved it with Lua (I always like when people actually use it) :)

Anyways I know a lot of people who tell me "it does not work with UNC paths" but it always does for me.

So could someone post a debug log from a "does not work with UNC paths" ?

Michael Medin

• Message #1471

Better yet give me a line, which does work. For example
foo\bar with pattern *.txt

I have tried several days without success. I also got problems with LUAScript when I need to check if directory is empty and I want to return different output to NRPE and Nagios in different parts of the code. Most of the time it says "No handler returned from script." even thought it is working using /test (I noticed it just jumps to last end when running as service) and sometimes when I use return inside some function nsclient returns that output to nrpe even it should returned it to another function. I believe it is faster to code the functionality of NSClient in Perl and stop using this in all our Windows-machines.

1. The debugging of LUA-script sucks. One can't trust it at all

You can test to add check for "File Not Found" to my script abose. At least I didn't get it to work after nine hours of coding and testing. I am going to wait few days for replies and after that I am not touching this software again to prevent braindamage :)

• Message #1474

Hello,

Absolutely First I define the following aliases:

mime1=checkFile2 filter=in path=x:\nscp pattern=*.txt filter+written=<1d MaxWarn=1 MaxCrit=1 "syntax=%filename% %write%"
mime2=checkFile2 filter=in path=\\192.168.0.1\data\nscp pattern=*.txt filter+written=<1d MaxWarn=1 MaxCrit=1 "syntax=%filename% %write%"


Then I run in test mode and get the following:

mickem@gotrek:~/nscnrpe -c mime1
test.txt Tuesday, October 13, 2009 17:12:15, test.txt: 1 > critical|'test.txt'=1;1;1;
mickem@gotrek:~/nscnrpe -c mime2
test.txt Tuesday, October 13, 2009 17:12:15, test.txt: 1 > critical|'test.txt'=1;1;1;


So now we know "UNC" paths are working... lets move on...

Then I start the service and run the commands and I get:

mickem@gotrek:~/nscnrpe -c mime1
CheckFile ok|'no files found'=0;1;1;
mickem@gotrek:~/nscnrpe -c mime2
CheckFile ok|'no files found'=0;1;1;


Now this is might at first glancve seem like a bug but it is the correct results. The reason is that the service runs as "local system"(?) and "local system" does not have access to the shares above (if you check the nscp log you can see something fishy is going on).

Anyways, changing the user to "mickem" (the one I use which has access to the shares in question) gives the following: (since I don't have AD at home it is sort of hard to give fine grained access to the service user).

mickem@gotrek:~/nscnrpe -c mime1
CheckFile ok|'no files found'=0;1;1;
mickem@gotrek:~/nscnrpe -c mime2
test.txt Tuesday, October 13, 2009 17:12:15, test.txt: 1 > critical|'test.txt'=1;1;1;


Again this is expected the reason this time is that the mapped drives is mapped by me in my session where as the service is my user it does not share my session. But the second one works splendidly since it accesses thew remote share and not the mapped drive.

Presumably you can also add the "x:\" to the login script of the service but I have not tested that.

All of this is pretty much basic "Windows administrator 101" (or for that matter Unix administrator 101).

And I know that a lot of the problem people have is related to accounts and security and such but unfortunately it is outside the scope of this wiki to have windows configuration and administration tips.

Though I would like to add that perhaps I shall add a better error message since the only thing you get in the log is:

2009-10-13 19:33:58: debug:NSClient++.cpp:1073: Injecting: checkFile2: filter=in, path=x:\nscp, pattern=*.txt, filter+written=<1d, MaxWarn=1, MaxCrit=1, syntax=%filename% %write%
2009-10-13 19:33:58: debug:modules\CheckDisk\CheckDisk.cpp:116: Input is: x:\nscp / ffffffff
2009-10-13 19:33:58: debug:modules\CheckDisk\CheckDisk.cpp:119: Found a file dont do recursive scan: x:\nscp
2009-10-13 19:33:58: debug:modules\CheckDisk\CheckDisk.cpp:334: Looking for: path: x:, pattern: nscp
2009-10-13 19:33:58: debug:modules\CheckDisk\CheckDisk.cpp:122: Path is: x:


Which, unfortunately, does not really tell you what the problem is. I shall investigate this but unfortunately the "recursive model" used now is not really good for handling errors.

I hope this help! If not please send the debug log of NSClient++ running.

Michael Medin

• Message #1477

Ok. I thought this kind of functionality might be the issue. Thank you for your support. I can provide documentation later how to add correct permissions to use UNC-locations.

I noticed that there isn't a ticket about LUAScript arguments. This is very needed feature. Can I add the ticket by myself or will you do it?

• Message #1478

There is no arguments for lua scripts?

are you sure?

function debug (command, args)
table.foreachi(args, print)
print ('Command was: ' .. command)
return 'ok', 'hello'
end


From the supplied sample command

Michael Medin

• Message #1479

"As of now there are no support for arguments but in the future they will be added."

check_nrpe2 -H foo.example.com -p 5666 -c lua_command -a foo=1 bar=2

• Message #1480

Ohh... that is probably old, didn't even know I had written a guide on that :)

Michael Medin

• Message #1494

Are you going to implement that feature as we need it? I noticed that http://nsclient.org/nscp/blog/category/0.3.7 says "Added argument support to NRPE Client" what does that exactly mean?

• Message #1516

Uhmm, which issue? Arguments for Lua has been there for several versions (as per my example).

function debug (command, args)
table.foreachi(args, print)
print ('Command was: ' .. command)
return 'ok', 'hello'
end


The reference there iiis for the NRPEClient proxy which I assume you are note interested in?

Michael Medin