NSClient++ Help (#1) - Filters on CheckEventLog (#274) - Message List

Filters on CheckEventLog

Hello!

I want an alarm for the errors in the system EventLog? except those of W32Time; So I tried (and with many combinaisons of filters in out and so on):

CheckEventLog file=system MaxWarn=1 MaxCrit=1 filter+eventType==error filter-eventSource==W32Time

And whith filter-eventSource=!W32Time, I have the same result...

So, I think that I have misunderstood something in the filters!

Thanks for your help

JL
10/23/08 14:22:51 (5 years ago)
Tree View Flat View (newer first) Flat View (older first)
  • Message #852

    Use single = CheckEventLog file=system MaxWarn=1 MaxCrit=1 filter+eventType=error filter-eventSource=W32Time

    I has something alike: CheckEventLog file=system MaxWarn=1 MaxCrit=1 filter+eventType=error filter-eventSource=substr:W32Time

    anonymous
    10/23/08 21:51:54 (5 years ago)
    • Message #854

      Thanks for your help, anonymous...

      eventType needs '=='

      But your 'filter-eventSource=substr:W32Time' works fine

      So, I use the following request:

      CheckEventLog file=system filter=new MaxWarn=1 MaxCrit=1 filter+eventType==error filter-eventSource=substr:W32Time unique

      Have a good day!

      JL
      10/24/08 08:27:58 (5 years ago)
Tree View Flat View (newer first) Flat View (older first)

Subscriptions