Event log Checker.

Check for errors and warnings in the event log. This is only supported through NRPE so if you plan to use only NSClient this wont help you at all.

Queries (commands)

• CheckEventLog/checkeventlogcache checkeventlogcache? Check for errors in the event logger!
• CheckEventLog/check_eventlog_cache check_eventlog_cache? Check for errors in the event logger!
• CheckEventLog/checkeventlog checkeventlog? Check for errors in the event logger!
• CheckEventLog/check_eventlog check_eventlog? Check for errors in the event logger!

Commands (executable)

TODO: Add command list

Configuration

CONFIGURE REALTIME CHECKING

A set of options to configure the real time checks

Section: /settings/eventlog/real-time

Keys:

Key	Default	Description
log	LOGS TO CHECK	Coma separated list of logs to check
enabled	REAL TIME CHECKING	Spawns a backgrounnd thread which detects issues and reports them back instantly.
maximum age	MAGIMUM AGE	How long before reporting "ok" (if this is set to off no ok will be reported only errors)
startup age	STARTUP AGE	The initial age to scan when starting NSClient++
enable active	ENABLE ACTIVE MONITORING	This will store all matches so you can use real-time filters from active monitoring (use CheckEventlogCache?).
debug	DEBUG	Log missed records (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.

REALTIME FILTERS

A set of filters to use in real-time mode

Section: /settings/eventlog/real-time/filters

EVENT LOG SECTION

Section for the EventLog? Checker (CheckEventLog.dll).

Section: /settings/eventlog

Keys:

Key	Default	Description
debug	DEBUG	Log more information when filtering (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.
lookup names	LOOKUP NAMES	Lookup the names of eventlog files
buffer size	BUFFER_SIZE	The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
syntax	SYNTAX	Set this to use a specific syntax string for all commands (that don't specify one).