NSClient++ Help (#1) - CheckEventLog - Inject buffer to small [SOLVED] (#657) - Message List

Hi, after using NSClient++ a long time now for services and performance counters, I now have the need to check the event logs too. But all my tries end up in errors.

An example: # check_nrpe -H joe -c CheckEventLog -a file="Application" filter=new MaxWarn=1 MaxCrit=2 filter-eventID=="1033" filter-eventType==information filter=out "filter-generated=<1h"

UNKNOWN: Return buffer to small to handle this command.

On windows side in the nsclient log:

2010-09-03 15:38:09: debug:NSClient++.cpp:1106: Injecting: CheckEventLog: file=Application, filter=new, MaxWarn=1, MaxCrit=2, filter-eventID==1033, filter-eventType==information, filter=out, filter-generated=<1h
2010-09-03 15:38:09: debug:modules\CheckEventLog\CheckEventLog.cpp:693: Using: old TODO
2010-09-03 15:38:09: debug:modules\CheckEventLog\CheckEventLog.cpp:700: Boot time: 0
2010-09-03 15:38:09: debug:modules\CheckEventLog\CheckEventLog.cpp:484: Attempting to match: Application with Application
2010-09-03 15:38:18: debug:modules\CheckEventLog\CheckEventLog.cpp:793: Evaluation time: 90010
2010-09-03 15:38:18: debug:include\NSCHelper.cpp:73: String (1692130) to long to fit inside buffer(4096) : error: MSS
2010-09-03 15:38:18: error:NSClient++.cpp:1134: UNKNOWN: Return buffer to small to handle this command.
2010-09-03 15:38:18: error:include\NSCHelper.cpp:241: Inject buffer to small, increase the value of: string_length.

The event with id 1033 occurred one time in the last hour at this time. I already included following in the nsc.ini:

[EventLog]
buffer_size=512000

I'm running NSClient 0.3.8 on a 64bit Windows Server 2008. Following the debug output of starting NSClient++.

Thank you for any help!

2010-09-03 15:34:34: debug:CACHENSClient++.cpp:551: Attempting to start NSCLient++ - 0.3.8.76 2010-05-27
2010-09-03 15:34:34: debug:CACHENSClient++.cpp:969: Loading plugin: CheckDisk...
2010-09-03 15:34:34: debug:CACHENSClient++.cpp:969: Loading plugin: Event log Checker....
2010-09-03 15:34:34: debug:CACHENSClient++.cpp:969: Loading plugin: Helper function...
2010-09-03 15:34:34: debug:CACHENSClient++.cpp:969: Loading plugin: CheckSystem...
2010-09-03 15:34:34: debug:CACHENSClient++.cpp:969: Loading plugin: File logger...
2010-09-03 15:34:34: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:73: Autodetected w2k or later, using w2k PDH counters.
2010-09-03 15:34:34: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:110: Using index to retrive counternames
2010-09-03 15:34:34: message:CACHEmodules\FileLogger\FileLogger.cpp:93: Log path is: C:\Program Files\NSClient++\\nsclient.log
2010-09-03 15:34:34: debug:CACHENSClient++.cpp:969: Loading plugin: NRPE server (w/ SSL)...
2010-09-03 15:34:34: debug:CACHEmodules\NRPEListener\NRPEListener.cpp:91: Loading all commands (from NRPE)
2010-09-03 15:34:34: debug:CACHEmodules\NRPEListener\NRPEListener.cpp:121: Starting NRPE socket...
2010-09-03 15:34:34: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:130: Found countername: CPU:    \Processor(_total)\% Processor Time
2010-09-03 15:34:34: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:131: Found countername: UPTIME: \System\System Up Time
2010-09-03 15:34:34: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:132: Found countername: MCL:    \Memory\Commit Limit
2010-09-03 15:34:34: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:133: Found countername: MCB:    \Memory\Committed Bytes
2010-09-03 15:34:34: debug:CACHENSClient++.cpp:969: Loading plugin: NSClient server...
2010-09-03 15:34:34: debug:CACHEinclude\Socket.h:669: Bound to: 0.0.0.0:5666
2010-09-03 15:34:34: debug:NSClient++.cpp:671: NSCLient++ - 0.3.8.76 2010-05-27 Started!