Combine Filters in CheckEventLog does not work in V2.6

[frank@…]

./check_nrpe -H 192.168.238.222 -c CheckEventLog -a MaxCrit=1 file=Anwendung filter-generated=\<6d filter-message=substr:Linux filter=all filter=in truncate=100 descriptions

I tried this against V2.6 and V2.5h.
with 2.5 i get e.g. within 6 days 20 matches and if i change to 1day e.g. 2 matches
These are the right values.

with v2.6 the result is always Status OK and no result. Without the filter-generated Parameter I got e.g. 100 matches.

[frank@…]

Correction:
behaviour not depends on the Version but on the count of the event log rows
maybe there is an integer problem : we have more than 32768 rows.
I Tried diffent envent logs with less rows and noticed no problem with the filter
parameter

[mickem]

Humm, looks strange the "counter" was an unsigned integer (thats around 4.000.000.000) I have now explicitly set it to unsigned long int if it for some strange reason thought int was less then long int (32bit).

Also the timeout issues might be causing this (as mentioned in the other post)?

I have again rewritten the filter handler so making filters are (I hope) simpler but I don't think this is much of an issue...

MickeM