Nsclient 4.4.23
Windows 2008 Windows 2012 R2 and Windows 2016 Server
Using this command
Code: Select all
define command{
command_name check_win_eventlog
command_line $USER1$/ -H $HOSTADDRESS$ -s $ARG1$ -l $ARG2$ -t $ARG3$
}
Code: Select all
define service {
host_name TGCS020-2016
service_description Check System Event Logs
check_command check_nrpe!check_eventlog -a file=System scan-range=-59m
servicegroups Event Logs
check_interval 60
check_period backup_WIN16
notification_period backup_WIN16
use generic-service
}
define service {
host_name TGCS020-2016
service_description Check Application Event Logs
check_command check_nrpe!check_eventlog -a file=Application scan-range=-59m
servicegroups Event Logs
check_interval 60
check_period backup_WIN16
notification_period backup_WIN16
use generic-service
}
Event id 157
WARNING: 4/4 System disk (Disk 2 has been surprise removed.), System disk (Disk 1 has been surprise removed.), System disk (Disk 2 has been surprise removed.), System disk (Disk 1 has been surprise removed.)
I get this on my Veeam Proxy servers and on the Veeam Server itself
I tried this
Code: Select all
check_command check_nrpe!check_eventlog -a file=System scan-range=-59m "filter=id>157"
Any idea on how to filter out certain events? am I on the right path?
Thank you,
Tom