Page 1 of 1

Pls Help, check_eventlog exclude eventid

Posted: Fri Oct 18, 2019 3:18 am
by carmenqueasyy
Hi, I using script for check eventlog

Code: Select all

check_nrpe -n -t 120 -H x.x.x.x -c check_eventlog -a "scan-range=-1h" "file=application" "warn=count>50" "crit=count>75" "top-syntax=%(status): %(count) message(s)" 
Its works fine, but I have an eventid that I want to exclude from the final result, is this possible?
I trying

Code: Select all

check_nrpe -n -t 120 -H x.x.x.x -c check_eventlog -a "scan-range=-1h" "file=application" "warn=count>50" "crit=count>75" "top-syntax=%(status): %(count) message(s)" "filter!=id=1515"
but "!=" not work for "filter", help! Thanks.

Re: Pls Help, check_eventlog exclude eventid

Posted: Fri Oct 18, 2019 10:26 am
by scottwilkerson
negate is in the wrong place

Try:

Code: Select all

check_nrpe -n -t 120 -H x.x.x.x -c check_eventlog -a "scan-range=-1h" "file=application" "warn=count>50" "crit=count>75" "top-syntax=%(status): %(count) message(s)" "filter=id != 1515"