Nagios Support Forum

Good morning,

I want to monitor when a process is Ok or Ko with the event viewer.
I have used the alias_event_log.

alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=id = 10007"

The alias generate the alert!!!

My problem is that when the event is in the event viewer appears alert, but the alert remains always.

Is it possible to filter on a timer that controls if it appears, or that when Ok event recovers KO?

Example.
id = 10007 is the KO
id = 10008 is te OK

alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=id = 10007" generated the alert CRITICAL but when appears the id = 10008 RECOVERY

Thanks for your time.
Sorry for my English

Regards

How do I define that if I find 1 event is OK?

Is it possible to filter an event is OK and another CRITICAL within the same alias?

Thanks for your time
Regards

The filter documentation for nsclient leaves much to be desired. See:
http://www.nsclient.org/nscp/wiki/Check ... og/samples
http://nsclient.org/nscp/ticket/529