alias_event_log

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
RDMaroto
Posts: 72
Joined: Wed Nov 20, 2013 10:54 am

alias_event_log

Post by RDMaroto »

Good morning,

I want to monitor when a process is Ok or Ko with the event viewer.
I have used the alias_event_log.

alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=id = 10007"

The alias generate the alert!!!

My problem is that when the event is in the event viewer appears alert, but the alert remains always.

Is it possible to filter on a timer that controls if it appears, or that when Ok event recovers KO?

Example.
id = 10007 is the KO
id = 10008 is te OK

alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=id = 10007" generated the alert CRITICAL but when appears the id = 10008 RECOVERY

Thanks for your time.
Sorry for my English

Regards
RDMaroto
Posts: 72
Joined: Wed Nov 20, 2013 10:54 am

Re: alias_event_log

Post by RDMaroto »

How do I define that if I find 1 event is OK?
RDMaroto
Posts: 72
Joined: Wed Nov 20, 2013 10:54 am

Re: alias_event_log

Post by RDMaroto »

Is it possible to filter an event is OK and another CRITICAL within the same alias?

Thanks for your time
Regards
abrist
Red Shirt
Posts: 8334
Joined: Thu Nov 15, 2012 1:20 pm

Re: alias_event_log

Post by abrist »

The filter documentation for nsclient leaves much to be desired. See:
http://www.nsclient.org/nscp/wiki/Check ... og/samples
http://nsclient.org/nscp/ticket/529
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
Locked