Event log Checker.

Check for errors and warnings in the event log. This is only supported through NRPE so if you plan to use only NSClient this wont help you at all.

Queries (commands)

• checkeventlogcache? Check for errors in the event logger!
• check_eventlog_cache? Check for errors in the event logger!
• checkeventlog? Check for errors in the event logger!
• check_eventlog Check for errors in the event logger!

Commands (executable)

TODO: Add command list

Configuration

CONFIGURE REALTIME CHECKING

A set of options to configure the real time checks

Section: /settings/eventlog/real-time

Keys:

Key	Title	Default value
log	LOGS TO CHECK	application
	Coma separated list of logs to check
enabled	REAL TIME CHECKING	0
	Spawns a backgrounnd thread which detects issues and reports them back instantly.
maximum age	MAGIMUM AGE	5m
	How long before reporting "ok" (if this is set to off no ok will be reported only errors)
startup age	STARTUP AGE	30m
	The initial age to scan when starting NSClient++
enable active	ENABLE ACTIVE MONITORING	0
	This will store all matches so you can use real-time filters from active monitoring (use CheckEventlogCache?).
debug	DEBUG	0
	Log missed records (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.

REALTIME FILTERS

A set of filters to use in real-time mode

Section: /settings/eventlog/real-time/filters

EVENT LOG SECTION

Section for the EventLog? Checker (CheckEventLog.dll).

Section: /settings/eventlog

Keys:

Key	Title	Default value
debug	DEBUG	0
	Log more information when filtering (usefull to detect issues with filters) not usefull in production as it is a bit of a resource hog.
lookup names	LOOKUP NAMES	1
	Lookup the names of eventlog files
buffer size	BUFFER_SIZE	131072
	The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
syntax	SYNTAX
	Set this to use a specific syntax string for all commands (that don't specify one).