100 % CPU with eventlog check

[Remc0]

I'm checking the eventlog via an alias:

alias_event_log=CheckEventLog file=application file=system filter=new filter=out MaxWarn=1 MaxCrit=1 filter-generated=>2d filter-severity==success filter-severity==informational truncate=1023 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"

I do this by the command:

check_nrpe -H "$HOSTADDRESS$" -p 5666 -c alias_event_log

After a check the cpu goes to 100% with the nsclient process.
The output of the nclient.log is:

2010-06-04 11:17:22: error:modules\CheckEventLog\CheckEventLog.cpp:730: EvenlogBuffer? is too small change the value of buffer_size=72285 under [EventLog?] in nsc.ini : 122: The data area passed to a system call is too small.

When I disable the check of the eventlog everything works fine.
It happens in 0.3.7 and 0.3.8

[mickem]

Have you tried fixing the problem?

ie. add:

[EventLog]
buffer_size=72285

MickeM

[Remc0]

I will try that tomorrow, and report back.

[Remc0]

That does the trick. When searching on [eventlog] I found the documentation on it.