# If you want to fill this file with all avalible options run the following command: # nscp settings --generate --add-defaults --load-all # If you want to activate a module and bring in all its options use: # nscp settings --activate-module --add-defaults # For details run: nscp settings --help ; Undocumented section [/settings/default] ; PASSWORD - Password used to authenticate against server password = password ; ALLOWED HOSTS - A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. allowed hosts = x.x.x.x [/settings/external scripts] allow arguments = true allow nasty characters = true ; Undocumented section [/settings/NRPE/server] ; VERIFY MODE - Comma separated list of verification flags to set on the SSL socket. default-workarounds Various workarounds for what I understand to be broken ssl implementations no-sslv2 Do not use the SSLv2 protocol. no-sslv3 Do not use the SSLv3 protocol. no-tlsv1 Do not use the TLSv1 protocol. single-dh-use Always create a new key when using temporary/ephemeral DH parameters. This option must be used to prevent small subgroup attacks, when the DH parameters were not generated using "strong" primes (e.g. when using DSA-parameters). ssl options = ; VERIFY MODE - Comma separated list of verification flags to set on the SSL socket. none The server will not send a client certificate request to the client, so the client will not send a certificate. peer The server sends a client certificate request to the client and the certificate returned (if any) is checked. fail-if-no-cert if the client did not return a certificate, the TLS/SSL handshake is immediately terminated. This flag must be used together with peer. peer-cert Alias for peer and fail-if-no-cert. workarounds Various bug workarounds. single Always create a new key when using tmp_dh parameters. client-once Only request a client certificate on the initial TLS/SSL handshake. This flag must be used together with verify-peer verify mode = none ; ALLOW INSECURE CHIPHERS and ENCRYPTION - Only enable this if you are using legacy check_nrpe client. insecure = true allow arguments = true allow nasty characters = true ; Undocumented section [/modules] ; Undocumented key NSCAClient = 1 ; Undocumented key Scheduler = 1 ; NRPEServer - A server that listens for incoming NRPE connection and processes incoming requests. NRPEServer = 1 ; CheckSystem - Various system related checks, such as CPU load, process state, service state memory usage and PDH counters. CheckSystem = 1 ; NSClientServer - A server that listens for incoming check_nt connection and processes incoming requests. NSClientServer = 1 ; CheckExternalScripts - Execute external scripts CheckExternalScripts = 1 ; CheckHelpers - Various helper function to extend other checks. CheckHelpers = 1 ; CheckEventLog - Check for errors and warnings in the event log. CheckEventLog = 1 ; CheckNSCP - Use this module to check the healt and status of NSClient++ it self CheckNSCP = 1 ; CheckDisk - CheckDisk can check various file and disk related things. CheckDisk = 1 ; Configure log properties. [/settings/log] ; LOG LEVEL - Log level to use. Available levels are error,warning,info,debug,trace level = debug ; FILENAME - The file to write log data to. Set this to none to disable log to file. file name = nsclient.log ; DATEMASK - The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve. date format = %Y-%m-%d %H:%M:%S ; A list of templates for wrapped scripts. [/settings/external scripts/wrappings] ; WRAPPING - An external script wrapping ps1 = cmd /c echo scripts\\%SCRIPT% %ARGS%; exit($lastexitcode) | powershell.exe -command - ; WRAPPING - An external script wrapping ; WRAPPING - An external script wrapping bat = scripts\\%SCRIPT% %ARGS% ; WRAPPING - An external script wrapping An alias is an internal command that has been predefined to provide a single command without arguments. Be careful so you don't create loops (ie check_loop = check_a, check_a=check_loop) ; WRAPPING - An external script wrapping vbs = cscript.exe //T:30 //NoLogo scripts\\lib\\wrapper.vbs %SCRIPT% %ARGS% [/settings/external scripts/wrapped scripts] [/settings/external scripts/alias] ; ALIAS - Query alias alias_volumes_loose = check_drivesize ; ALIAS - Query alias alias_volumes = check_drivesize ; ALIAS - Query alias alias_sched_all = check_tasksched show-all "syntax=${title}: ${exit_code}" "crit=exit_code ne 0" ; ALIAS - Query alias alias_process_stopped = check_process "process=$ARG1$" "crit=state != 'stopped'" ; ALIAS - Query alias alias_service = check_service ; ALIAS - Query alias alias_process_hung = check_process "filter=is_hung" "crit=count>0" ; ALIAS - Query alias alias_process_count = check_process "process=$ARG1$" "warn=count > $ARG2$" "crit=count > $ARG3$" ; ALIAS - Query alias alias_process = check_process "process=$ARG1$" "crit=state != 'started'" ; ALIAS - Query alias alias_mem = check_memory ; ALIAS - Query alias alias_file_size = check_files "path=$ARG1$" "crit=size > $ARG2$" "top-syntax=${list}" "detail-syntax=${filename] ${size}" max-dir-depth=10 ; ALIAS - Query alias alias_disk = check_drivesize ; ALIAS - Query alias alias_cpu_ex = check_cpu "warn=load > $ARG1$" "crit=load > $ARG2$" time=5m time=1m time=30s ; ALIAS - Query alias alias_file_age = check_files "path=$ARG1$" "crit=written > $ARG2$" "top-syntax=${list}" "detail-syntax=${filename] ${written}" max-dir-depth=10 ; ALIAS - Query alias alias_cpu = check_cpu ; ALIAS - Query alias ;alias_event_log = check_eventlog ;alias_event_log = check_eventlog file=security file=application file=system "filter=level in ('error', 'Audit Failure') AND generated > -5m" alias_event_log = CheckEventLog file=security file=application MaxWarn=1 MaxCrit=1 "filter=level in ('error', 'Audit Failure') AND generated > -5m" ; ALIAS - Query alias alias_service_ex = check_service "exclude=Net Driver HPZ12" "exclude=Pml Driver HPZ12" exclude=stisvc ; ALIAS - Query alias alias_up = check_uptime ; ALIAS - Query alias alias_disk_loose = check_drivesize ; ALIAS - Query alias alias_sched_task = check_tasksched show-all "filter=title eq '$ARG1$'" "detail-syntax=${title} (${exit_code})" "crit=exit_code ne 0" ; ALIAS - Query alias alias_sched_long = check_tasksched "filter=status = 'running'" "detail-syntax=${title} (${most_recent_run_time})" "crit=most_recent_run_time < -$ARG1$" [/settings/external scripts/scripts] ; SCRIPT - For more configuration options add a dedicated section (if you add a new section you can customize the user and various other advanced features) check_winfile = scripts\check_winfile.exe //T:30 //NoLogo $ARG1$ ; SCRIPT - For more configuration options add a dedicated section (if you add a new section you can customize the user and various other advanced features) runcmd = scripts\runcmd.bat "$ARG1$" check_ms_win_tasks=cmd /c echo scripts\check_ms_win_tasks.ps1 $ARG1$; exit $LastExitCode | powershell.exe -command – ;################################################################## ;# NSCA Client SETTINGS ;# These settings control communication with the Nagios server ;################################################################## [/settings/scheduler/schedules/default] interval=5m [/settings/scheduler/schedules] cpu=alias_cpu mem=alias_mem disk=alias_disk service=alias_service ;# The following is the host check (always ok/up) host_check=CheckOK Machine is okay [/settings/NSCA/client] hostname=win_${host} [/settings/NSCA/client/targets/default] address=x.x.x.x encryption=des password=password