NSClient++ Help (#1) - Problem with checkEventLog and file=Application, does it work? (#264) - Message List

Problem with checkEventLog and file=Application, does it work?

Hi

Whatever i try do with checkEventLog and file=Application I get "EvenlogBuffer? is too small ...". In old version 0.2.7 it works but not in 0.3.5.1. NRPE client is v.2.12. Please, what am I missing?

./check_nrpe -H <host> -p 5666 -c checkEventLog -a filter=new file=Application MaxWarn=1 MaxCrit=1 filter+generated='<2h' filter+eventType==error

EvenlogBuffer? is too small (set the value of buffer_size): 122: The data area passed to a system call is too small.

This is on W2K3 SP2 x64

Regards Micke S.

MickeS
10/08/08 10:53:23 (5 years ago)
Tree View Flat View (newer first) Flat View (older first)
  • Message #826

    I'm having the same problem. It will work if you make your application log only 64k big.

    Stijn
    10/10/08 10:03:55 (5 years ago)
    • Message #827

      Yes I finally got it working after reading the changelog. But I got the impression that the buffer is 64k by default and by increasing it to at least 128k I got it working.

      Thanks for reply Stijn.

      MickeS
      10/13/08 07:28:22 (5 years ago)
      • Message #836

        thanx for help in out I shall update the FAQ, there is (BTW) a lot of info in the change log, it is where I document all new features ;)

        MickeM

        mickem
        10/20/08 08:22:56 (5 years ago)
        • Message #860

          Where do i need to set this buffer_size? I have NSclient++-Win32-0.3.5 and i cant find [EventLog?] section is NSC.ini file. If i just put the following in NSC.ini file:

          [EventLog?] buffer_size=128000

          and restart NSclient++, then it still gives me the same error.

          RP
          10/29/08 09:12:22 (5 years ago)
          • Message #949

            I had to create a new section I put the following in NSC.ini : it worked

            [EventLog?] buffer_size=512000

            Jeff Humes
            12/31/08 05:42:03 (4 years ago)
Tree View Flat View (newer first) Flat View (older first)

Subscriptions