Configuration for the CheckEventLog

This page describes the configuration options for the CheckEventLog module.

This is a wrapper page the actual data is on the following page CheckEventLog/config

Configuration Sections

Configuration for CheckEventLog module

Section with configuration keys for the CheckEventLog module

Path / Section	Key	Default value	Description
/settings/eventlog/real-time	debug	0	DEBUG
/settings/eventlog/real-time	enabled	0	REAL TIME CHECKING
/settings/eventlog/real-time	log	application,system	LOGS TO CHECK
/settings/eventlog/real-time	startup age	30m	STARTUP AGE
/settings/eventlog/real-time/filters			REALTIME FILTERS
/settings/eventlog	debug	0	DEBUG
/settings/eventlog	lookup names	1	LOOKUP NAMES
/settings/eventlog	buffer size	131072	BUFFER_SIZE
/settings/eventlog	syntax		SYNTAX

CONFIGURE REALTIME CHECKING

A set of options to configure the real time checks

Section: /settings/eventlog/real-time

Keys:

Key	Default	Title	Description
debug	0	DEBUG	Log missed records (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.
enabled	0	REAL TIME CHECKING	Spawns a backgrounnd thread which detects issues and reports them back instantly.
log	application,system	LOGS TO CHECK	Comma separated list of logs to check
startup age	30m	STARTUP AGE	The initial age to scan when starting NSClient++

Sample:

# CONFIGURE REALTIME CHECKING
# A set of options to configure the real time checks
[/settings/eventlog/real-time]
# DEBUG
# Log missed records (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.
debug=0
# REAL TIME CHECKING
# Spawns a backgrounnd thread which detects issues and reports them back instantly.
enabled=0
# LOGS TO CHECK
# Comma separated list of logs to check
log=application,system
# STARTUP AGE
# The initial age to scan when starting NSClient++
startup age=30m

DEBUG

Description: Log missed records (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.

Key: debug

Default value: 0

Used by: CheckEventlog?, CheckEventLog

Sample:

# DEBUG
# Log missed records (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.
[/settings/eventlog/real-time]
debug=0

REAL TIME CHECKING

Description: Spawns a backgrounnd thread which detects issues and reports them back instantly.

Key: enabled

Default value: 0

Used by: CheckEventlog?, CheckEventLog

Sample:

# REAL TIME CHECKING
# Spawns a backgrounnd thread which detects issues and reports them back instantly.
[/settings/eventlog/real-time]
enabled=0

LOGS TO CHECK

Description: Comma separated list of logs to check

Key: log

Default value: application,system

Used by: CheckEventlog?, CheckEventLog

Sample:

# LOGS TO CHECK
# Comma separated list of logs to check
[/settings/eventlog/real-time]
log=application,system

STARTUP AGE

Description: The initial age to scan when starting NSClient++

Key: startup age

Default value: 30m

Used by: CheckEventlog?, CheckEventLog

Sample:

# STARTUP AGE
# The initial age to scan when starting NSClient++
[/settings/eventlog/real-time]
startup age=30m

REALTIME FILTERS

A set of filters to use in real-time mode

Section: /settings/eventlog/real-time/filters

Sample:

# REALTIME FILTERS
# A set of filters to use in real-time mode
[/settings/eventlog/real-time/filters]

EVENT LOG SECTION

Section for the EventLog? Checker (CheckEventLog.dll).

Section: /settings/eventlog

Keys:

Key	Default	Title	Description
debug	0	DEBUG	Log more information when filtering (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.
lookup names	1	LOOKUP NAMES	Lookup the names of eventlog files
buffer size	131072	BUFFER_SIZE	The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
syntax		SYNTAX	Set this to use a specific syntax string for all commands (that don't specify one).

Sample:

# EVENT LOG SECTION
# Section for the EventLog Checker (CheckEventLog.dll).
[/settings/eventlog]
# DEBUG
# Log more information when filtering (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.
debug=0
# LOOKUP NAMES
# Lookup the names of eventlog files
lookup names=1
# BUFFER_SIZE
# The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
buffer size=131072
# SYNTAX
# Set this to use a specific syntax string for all commands (that don't specify one).
syntax=

DEBUG

Description: Log more information when filtering (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.

Key: debug

Default value: 0

Used by: CheckEventlog?, CheckEventLog

Sample:

# DEBUG
# Log more information when filtering (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.
[/settings/eventlog]
debug=0

LOOKUP NAMES

Description: Lookup the names of eventlog files

Key: lookup names

Default value: 1

Used by: CheckEventlog?, CheckEventLog

Sample:

# LOOKUP NAMES
# Lookup the names of eventlog files
[/settings/eventlog]
lookup names=1

BUFFER_SIZE

Description: The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.

Key: buffer size

Default value: 131072

Used by: CheckEventlog?, CheckEventLog

Sample:

# BUFFER_SIZE
# The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
[/settings/eventlog]
buffer size=131072

SYNTAX

Description: Set this to use a specific syntax string for all commands (that don't specify one).

Key: syntax

Used by: CheckEventlog?, CheckEventLog

Sample:

# SYNTAX
# Set this to use a specific syntax string for all commands (that don't specify one).
[/settings/eventlog]
syntax=