NSClient++ Help (#1) - No output returned from plugin (#999) - Message List
I'm having issues with the CheckEventLog module.
I'm using this check command.
$USER1$/check_nrpe -H $HOSTADDRESS$ -p 12489 -s password -c CheckEventLog -a filter=new file="application" MaxWarn=1 MaxCrit=1 filter-generated=\<1h filter-eventType==error filter=in filter=al
My nsclient file looks like this
; Undocumented section [/modules] ; CheckDisk - CheckDisk can check various file and disk related things. The current version has commands to check Size of hard drives and directories. CheckDisk = 1 ; Event log Checker. - Check for errors and warnings in the event log. This is only supported through NRPE so if you plan to use only NSClient this wont help you at all. CheckEventLog = 1 ; Check External Scripts - A simple wrapper to run external scripts and batch files. CheckExternalScripts = 1 ; Helper function - Various helper function to extend other checks. This is also only supported through NRPE. CheckHelpers = 1 ; Check NSCP - Checkes the state of the agent CheckNSCP = 1 ; CheckSystem - Various system related checks, such as CPU load, process state, service state memory usage and PDH counters. CheckSystem = 1 ; NRPE server - A simple server that listens for incoming NRPE connection and handles them. NRPE is preferred over NSClient as it is more flexible. You can of cource use both NSClient and NRPE. NRPEServer = 1 ; NSClient server - A simple server that listens for incoming NSClient (check_nt) connection and handles them. Although NRPE is the preferred method NSClient is fully supported and can be used for simplicity or for compatibility. NSClientServer = 1 NRPEListener = 1 ; Undocumented section [/settings/default] ; ALLOWED HOSTS - A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. allowed hosts = 192.168.1.25 ; PASSWORD - Password used to authenticate againast server password = password ; Section for NRPE (NRPEListener.dll) (check_nrpe) protocol options. [/settings/NRPE/server] ; Section for NSClient (NSClientServer.dll) (check_nt) protocol options. [/settings/NSClient/server] ; Section for system checks and system settings [/settings/check/system/windows] ; Confiure which services has to be in which state [/settings/check/system/windows/service mapping] ; Configure crash handling properties. [/settings/crash] ; Section for the EventLog Checker (CheckEventLog.dll). [/settings/eventlog] ; A set of options to configure the real time checks [/settings/eventlog/real-time] ; A set of filters to use in real-time mode [/settings/eventlog/real-time/filters] ; Section for external scripts configuration options (CheckExternalScripts). [/settings/external scripts] ; A list of aliases available. An alias is an internal command that has been "wrapped" (to add arguments). Be careful so you don't create loops (ie check_loop=check_a, check_a=check_loop) [/settings/external scripts/alias] ; A list of scripts available to run from the CheckExternalScripts module. Syntax is: <command>=<script> <arguments> [/settings/external scripts/scripts] ; A list of wrappped scripts (ie. using the template mechanism) [/settings/external scripts/wrapped scripts] ; A list of templates for wrapped scripts [/settings/external scripts/wrappings] ; Section for configuring the log handling. [/settings/log] ; Configure log file properties. [/settings/log/file] ; Section for configuring the shared session. [/settings/shared session]
I get an error No output returned from plugin
Any ideas where I'm going wrong?
A lot of strange things going on here...
- -s password There is no password using nrpe.
- -p 12489 Thats normally not the NRPE port?
- "old" eventlog syntax is no longer supported in 0.4.0.
filter=new filter-generated=\<1h filter-eventType==error filter=in filter=all
"filter=generated lt 1h AND type==error"
But not sure any of this causes the error your experiencing...
Michael Medinmickem06/19/12 19:44:48 (11 months ago)
If I remove the -s password
I get the following error.
CHECK_NRPE: Error - Could not complete SSL handshake.
I have Check_nt working great.
Just cannot get NRPE to work as well.
Can you use both at the same time?sucanushie06/19/12 19:52:45 (11 months ago)
I changed the command to this...
$USER1$/check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckEventLog -a filter=new file="application" MaxWarn=1 MaxCrit=1 "filter=generated lt 1h AND type==error"
And now getting this error.
Request contained arguments (not currently allowed, check the allow arguments option).sucanushie06/19/12 20:20:04 (11 months ago)
Then everything is working right?
You need to configure NRPE to allow arguments as well..
(or use aliases)
Michael Medinmickem06/20/12 18:33:13 (11 months ago)
Thanks for the pointers so far Michael. I made the change to nsclient and restarted the service.. still see the same msg. Allow arguments=true
Any other suggestions?Chiqi08/02/12 17:45:25 (10 months ago)
Could you past the effective config?
Also if you have 0.4.1 you can (with latest build) do:
nscp settings --validate
To list all invalid keys...
A good way to get the "right config keys" are:
- backup nsclient.ini
- clean out everything except modules in nsclient.ini
- run the following command: nscp settings --generate ini --add-defaults
- You ini file now has the proper keys with their proper names and most often their proper descriptions...
Michael Medinmickem08/03/12 08:13:58 (10 months ago)
I'm look for the check command to alert me when I get an error in my event log with an event ID of 20sucanushie06/19/12 20:38:21 (11 months ago)