Good morning,
I want to monitor when a process is Ok or Ko with the event viewer.
I have used the alias_event_log.
alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=id = 10007"
The alias generate the alert!!!
My problem is that when the event is in the event viewer appears alert, but the alert remains always.
Is it possible to filter on a timer that controls if it appears, or that when Ok event recovers KO?
Example.
id = 10007 is the KO
id = 10008 is te OK
alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=id = 10007" generated the alert CRITICAL but when appears the id = 10008 RECOVERY
Thanks for your time.
Sorry for my English
Regards
alias_event_log
Re: alias_event_log
How do I define that if I find 1 event is OK?
Re: alias_event_log
Is it possible to filter an event is OK and another CRITICAL within the same alias?
Thanks for your time
Regards
Thanks for your time
Regards
Re: alias_event_log
The filter documentation for nsclient leaves much to be desired. See:
http://www.nsclient.org/nscp/wiki/Check ... og/samples
http://nsclient.org/nscp/ticket/529
http://www.nsclient.org/nscp/wiki/Check ... og/samples
http://nsclient.org/nscp/ticket/529
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.