Page 1 of 1

Pls Help, check_eventlog exclude eventid

PostPosted: Fri Oct 18, 2019 3:18 am
by carmenqueasyy
Hi, I using script for check eventlog
Code: Select all
check_nrpe -n -t 120 -H x.x.x.x -c check_eventlog -a "scan-range=-1h" "file=application" "warn=count>50" "crit=count>75" "top-syntax=%(status): %(count) message(s)"

Its works fine, but I have an eventid that I want to exclude from the final result, is this possible?
I trying
Code: Select all
check_nrpe -n -t 120 -H x.x.x.x -c check_eventlog -a "scan-range=-1h" "file=application" "warn=count>50" "crit=count>75" "top-syntax=%(status): %(count) message(s)" "filter!=id=1515"

but "!=" not work for "filter", help! Thanks.

Re: Pls Help, check_eventlog exclude eventid

PostPosted: Fri Oct 18, 2019 10:26 am
by scottwilkerson
negate is in the wrong place

Try:
Code: Select all
check_nrpe -n -t 120 -H x.x.x.x -c check_eventlog -a "scan-range=-1h" "file=application" "warn=count>50" "crit=count>75" "top-syntax=%(status): %(count) message(s)" "filter=id != 1515"