NSClient++ Help (#1) - Check Event Log (#567) - Message List

Check Event Log

Excuse my newbie-ness... But I'm trying to setup something to watch to test watching the event log on a windows machine. I'm attempting to follow the instructions, and everytime I try to put something: in for a service item I cannot verify my nagios configuration:

If I take out the 'Service-Description' line. Nothing shows up in Nagios, although it verifies. It appears to ignore it.

######################## Check Events ############################ # define service{

use generic-service host_name ZOCOLO service_description Event Log Cluster Failure Check check_command check_event_log system 1 1 10 1069 }

As a side point: pardon my ignorance - but I have no idea what '--- 1, 1, 10, 1069 means.'

However regardless I get this error on verification: Checking services... Error: Service check command 'check_event_log system 1 1 10 1069' specified in service 'Event Log Cluster Failure Check' for host 'ZOCOLO' not defined anywhere!

I understand that I am coming at this from the wrong direction. Can you point me in the correct one? http://nsclient.org/nscp/wiki/CheckEventLog/CheckEventLog <-- This link just doesn't tell me what to put in which CFGs to monitor what... It expects me to be an expert.

Thankx,

Robert

  • Message #1745

    my commands.cfg has:

    define command{

    command_name check_event_log

    command_line check_nrpe -H $HOSTADDRESS$ -p 5666 -c checkEventLog -a

    filter=new file=$ARG1$ MaxWarn=$ARG2$ MaxCri?$

    }

    my windows.cfg has:

    define service{

    use generic-service

    host_name ZOCOLO

    service_description Event Log Cluster Failure Check

    check_command check_event_log system 1 1 10 1069

    }

    • Message #1746

      oh if I follow the actual documentation with the:

      <<CheckEventLog>> - I get illegal characters violation. Is that supposed to represent something else?

  • Message #1747

    to reply yet again to myself... This helped: http://nsclient.org/nscp/discussion/topic/562

    and I copied his:

    define command{

    command_name check_event_log

    command_line check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckEventLog -a

    filter=new file="$ARG1$" MaxWarn=$ARG2$ MaxC$

    }

    define service{

    use generic-service

    host_name ZOCOLO

    service_description Check W3SVCWP Error 2269

    check_command check_event_log!system!1!1!6161

    }

    I realize I have a bogus service name. I wonder if it matters. (prolly not it just what nagios shows). But regardless, '6161' is the Print System error on my computer. So I attempted to show this.

    I opened the 5666 port through on my linux box. Do I need to make some config changes in the nsc.ini?

    Thankx, Robert

    • Message #1748

      ok answering my own question once again... with this posted nsc.ini http://nsclient.net/nscp/discussion/message/1027

      i included 'allow_nasty_meta_chars' and 'allow_arguments' and restarted my nsclient++

      But my Nagios still reports 'Warning' (null) with the details.

      Thankx,

      Robert

      • Message #1749

        FIY,

        The commands above have many errors so I am not sure if tis is what you use or just an aproximation.

        All in all there seems to be no filter so there will be no items.

        Michael Medin

Subscriptions