Monitoring the Windows Event Log

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Monitoring the Windows Event Log

Post by scottwilkerson »

In your nsclient.ini under the section

Code: Select all

[/settings/NRPE/server]
You need to set

Code: Select all

allow arguments = 1
then restart NSCP
Former Nagios employee
Creator:
ahumandesign.com
enneagrams.com
amitgupta19
Posts: 286
Joined: Fri Sep 08, 2017 5:53 am

Re: Monitoring the Windows Event Log

Post by amitgupta19 »

Hi Scott,

This section did not exist in the nsclient.ini file.
[/settings/NRPE/server]

So i added it manually on top of the file and then restarted the service NSClient++ .


After this it is giving the following error:
[xxxxxx@cblnagios01 libexec]$ ./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "filter=id=4003"
No file specified try adding: file=Application
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Monitoring the Windows Event Log

Post by scottwilkerson »

Lets try

Code: Select all

./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "file=Application filter=id=4003"
Former Nagios employee
Creator:
ahumandesign.com
enneagrams.com
amitgupta19
Posts: 286
Joined: Fri Sep 08, 2017 5:53 am

Re: Monitoring the Windows Event Log

Post by amitgupta19 »

Please find here with the output

[xxxxx@cblnagios01 libexec]$ ./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "file=Application filter=id=7002"
Parsing failed:
[xxxxx@cblnagios01 libexec]$ ./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "file=System filter=id=7002"
Parsing failed:

Regards
Amit
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: Monitoring the Windows Event Log

Post by ssax »

What does this show:

Code: Select all

./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "show-default 'file=Application' 'filter=id=4003'"
amitgupta19
Posts: 286
Joined: Fri Sep 08, 2017 5:53 am

Re: Monitoring the Windows Event Log

Post by amitgupta19 »

Please find here with the output

[amgupta@cblnagios01 libexec]$ ./check_nrpe -H xxx.xxx.xxxx.xxx -p 5666 -c check_eventlog -a "show-default 'file=Application' 'filter=id=4003'"
Exception processing request: Request command contained illegal metachars!
amitgupta19
Posts: 286
Joined: Fri Sep 08, 2017 5:53 am

Re: Monitoring the Windows Event Log

Post by amitgupta19 »

Did anyone got a chance to look into this?
amitgupta19
Posts: 286
Joined: Fri Sep 08, 2017 5:53 am

Re: Monitoring the Windows Event Log

Post by amitgupta19 »

Can anyone guide me here?
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Monitoring the Windows Event Log

Post by scottwilkerson »

What version of NSClient are you running?

Can you share your nsclient.ini ?
Former Nagios employee
Creator:
ahumandesign.com
enneagrams.com
amitgupta19
Posts: 286
Joined: Fri Sep 08, 2017 5:53 am

Re: Monitoring the Windows Event Log

Post by amitgupta19 »

Version of the nsclient

[amgupta@cblnagios01 libexec]$ ./check_nrpe -H 172.23.1.83
I (0,4,1,105 2014-04-28) seem to be doing fine...

nsclient.ini is attached here with
Attachments
nsclient.ini
NSCLIENT File
(8.62 KiB) Downloaded 146 times
Locked