NSClient++ Help (#1) - No output returned from plugin (#999) - Message List

No output returned from plugin

I'm having issues with the CheckEventLog module.

I'm using this check command.

$USER1$/check_nrpe -H $HOSTADDRESS$ -p 12489 -s password -c CheckEventLog -a filter=new file="application" MaxWarn=1 MaxCrit=1 filter-generated=\<1h filter-eventType==error filter=in filter=al

My nsclient file looks like this

; Undocumented section
[/modules]
; CheckDisk - CheckDisk can check various file and disk related things. The current version has commands to check Size of hard drives and directories.
CheckDisk = 1
; Event log Checker. - Check for errors and warnings in the event log. This is only supported through NRPE so if you plan to use only NSClient this wont help you at all.
CheckEventLog = 1
; Check External Scripts - A simple wrapper to run external scripts and batch files.
CheckExternalScripts = 1
; Helper function - Various helper function to extend other checks. This is also only supported through NRPE.
CheckHelpers = 1
; Check NSCP - Checkes the state of the agent
CheckNSCP = 1
; CheckSystem - Various system related checks, such as CPU load, process state, service state memory usage and PDH counters.
CheckSystem = 1
; NRPE server - A simple server that listens for incoming NRPE connection and handles them. NRPE is preferred over NSClient as it is more flexible. You can of cource use both NSClient and NRPE.
NRPEServer = 1
; NSClient server - A simple server that listens for incoming NSClient (check_nt) connection and handles them. Although NRPE is the preferred method NSClient is fully supported and can be used for simplicity or for compatibility.
NSClientServer = 1
NRPEListener = 1
; Undocumented section
[/settings/default]
; ALLOWED HOSTS - A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges.
allowed hosts = 192.168.1.25
; PASSWORD - Password used to authenticate againast server
password = password
; Section for NRPE (NRPEListener.dll) (check_nrpe) protocol options.
[/settings/NRPE/server]
; Section for NSClient (NSClientServer.dll) (check_nt) protocol options.
[/settings/NSClient/server]
; Section for system checks and system settings
[/settings/check/system/windows]
; Confiure which services has to be in which state
[/settings/check/system/windows/service mapping]
; Configure crash handling properties.
[/settings/crash]
; Section for the EventLog Checker (CheckEventLog.dll).
[/settings/eventlog]
; A set of options to configure the real time checks
[/settings/eventlog/real-time]
; A set of filters to use in real-time mode
[/settings/eventlog/real-time/filters]
; Section for external scripts configuration options (CheckExternalScripts).
[/settings/external scripts]
; A list of aliases available. An alias is an internal command that has been "wrapped" (to add arguments). Be careful so you don't create loops (ie check_loop=check_a, check_a=check_loop)
[/settings/external scripts/alias]
; A list of scripts available to run from the CheckExternalScripts module. Syntax is: <command>=<script> <arguments>
[/settings/external scripts/scripts]
; A list of wrappped scripts (ie. using the template mechanism)
[/settings/external scripts/wrapped scripts]
; A list of templates for wrapped scripts
[/settings/external scripts/wrappings]
; Section for configuring the log handling.
[/settings/log]
; Configure log file properties.
[/settings/log/file]
; Section for configuring the shared session.
[/settings/shared session]

I get an error No output returned from plugin

Any ideas where I'm going wrong?

  • Message #2652

    A lot of strange things going on here...

    1. -s password There is no password using nrpe.
    1. -p 12489 Thats normally not the NRPE port?
    1. "old" eventlog syntax is no longer supported in 0.4.0.

    Replace

    filter=new filter-generated=\<1h filter-eventType==error filter=in filter=all
    

    With:

    "filter=generated lt 1h AND type==error"
    

    But not sure any of this causes the error your experiencing...

    Michael Medin

    • Message #2653

      If I remove the -s password

      I get the following error.

      CHECK_NRPE: Error - Could not complete SSL handshake.

      I have Check_nt working great.

      Just cannot get NRPE to work as well.

      Can you use both at the same time?

      • Message #2654

        I changed the command to this...

        $USER1$/check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckEventLog -a filter=new file="application" MaxWarn=1 MaxCrit=1 "filter=generated lt 1h AND type==error"
        

        And now getting this error.

        Request contained arguments (not currently allowed, check the allow arguments option).

        • Message #2661

          Then everything is working right?

          You need to configure NRPE to allow arguments as well..

          (or use aliases)

          Michael Medin

          • Message #2717

            Thanks for the pointers so far Michael. I made the change to nsclient and restarted the service.. still see the same msg. Allow arguments=true

            Any other suggestions?

            • Message #2718

              Could you past the effective config?

              Also if you have 0.4.1 you can (with latest build) do:

              nscp settings --validate
              

              To list all invalid keys...

              A good way to get the "right config keys" are:

              1. backup nsclient.ini
              2. clean out everything except modules in nsclient.ini
              3. run the following command: nscp settings --generate ini --add-defaults
              4. You ini file now has the proper keys with their proper names and most often their proper descriptions...

              Michael Medin

        • Message #2655

          I'm look for the check command to alert me when I get an error in my event log with an event ID of 20

          • Message #2660

            Downgraded to Version 0.3.9 it worked like a charm

Subscriptions