NSClient++ Help (#1) - CheckEventLog: generated not working (#829) - Message List
trying to filter the event log for the events, which occur in the last 15 minutes. Somehow this command shows me a event which is over an year old..
root@Nagios-TestVM:/usr/local/nagios/libexec# ./check_nrpe -H server -c CheckEventLog -a file=application "filter=generated=<15m" "filter=type = 'error'" "filter=source = 'Userenv'" "filter=id IN (1526)" truncate=800 unique MaxWarn=1 MaxCrit=1 "syntax=%generated% - %id%: (%count%)"
Output: Wednesday, October 13, 2010 13:27:14 - 1526: (1), eventlog: 1 > critical|'eventlog'=1;1;1
Date output: Do 21. Jul 15:06:03 CEST 2011
I tried lots of things to get this working but found nothing.. Any help? Using latest stable client on a windows 2003 server machine.
generated=<15m translates to: generated (before) (15 minutes in the future). SO this will match all values. If you want the values in the last 15 minutes you want: generated > -15m which translates to generated (after) (15 minutes ago)
Michael Medinmickem07/26/11 10:23:23 (22 months ago)