NSClient++ Help (#1) - several filterEventTypes with CheckEventlog? (#40) - Message List

several filterEventTypes with CheckEventlog?

Hi,

I would like to combine the following two commandlines to one:

./check_nrpe -H 192.168.0.16 -c CheckEventLog -a file=system MaxWarn=1 MaxCrit=1 filter-generated=\<30m filter-eventType==warning filter=in filter=all

./check_nrpe -H 192.168.0.16 -c CheckEventLog -a file=system MaxWarn=1 MaxCrit=1 filter-generated=\<30m filter-eventType==error filter=in filter=all

But filter-eventType==warning,error doesnt works. Is this possible? Tia

Micha

  • Message #71

    ./check_nrpe -H 192.168.0.16 -c CheckEventLog -a file=system MaxWarn?=1 MaxCrit?=1 filter-generated=\<30m filter-eventType==error filter-eventType==warning filter=in filter=all

    • Message #72

      Sorry, I made a mistake in my last post. But try the following command definition:

      nrpe_handler in nsc.ini:

      command[check_example]=inject checkEventLog file=System MaxWarn=1 MaxCrit=1 filter+generated=<30m filter-eventType==info filter-eventType==auditSuccess filter-eventType==auditFailure filter=new filter=all filter=in

      plugin call:

      ./check_nrpe -H 192.168.0.16 -c check_example

      filter=new is not mentioned in the documentation! I discovered it while reading the source code of the module. It makes + and - work as they should.

Subscriptions