Page 2 of 4

Re: Monitoring the Windows Event Log

Posted: Mon Aug 05, 2019 8:44 am
by scottwilkerson
In your nsclient.ini under the section

Code: Select all

[/settings/NRPE/server]
You need to set

Code: Select all

allow arguments = 1
then restart NSCP

Re: Monitoring the Windows Event Log

Posted: Mon Aug 05, 2019 8:58 am
by amitgupta19
Hi Scott,

This section did not exist in the nsclient.ini file.
[/settings/NRPE/server]

So i added it manually on top of the file and then restarted the service NSClient++ .


After this it is giving the following error:
[xxxxxx@cblnagios01 libexec]$ ./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "filter=id=4003"
No file specified try adding: file=Application

Re: Monitoring the Windows Event Log

Posted: Mon Aug 05, 2019 9:10 am
by scottwilkerson
Lets try

Code: Select all

./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "file=Application filter=id=4003"

Re: Monitoring the Windows Event Log

Posted: Mon Aug 05, 2019 10:00 am
by amitgupta19
Please find here with the output

[xxxxx@cblnagios01 libexec]$ ./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "file=Application filter=id=7002"
Parsing failed:
[xxxxx@cblnagios01 libexec]$ ./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "file=System filter=id=7002"
Parsing failed:

Regards
Amit

Re: Monitoring the Windows Event Log

Posted: Mon Aug 05, 2019 4:10 pm
by ssax
What does this show:

Code: Select all

./check_nrpe -H xxx.xxx.xxx.xxx -p 5666 -c check_eventlog -a "show-default 'file=Application' 'filter=id=4003'"

Re: Monitoring the Windows Event Log

Posted: Tue Aug 06, 2019 4:53 am
by amitgupta19
Please find here with the output

[amgupta@cblnagios01 libexec]$ ./check_nrpe -H xxx.xxx.xxxx.xxx -p 5666 -c check_eventlog -a "show-default 'file=Application' 'filter=id=4003'"
Exception processing request: Request command contained illegal metachars!

Re: Monitoring the Windows Event Log

Posted: Wed Aug 07, 2019 9:45 am
by amitgupta19
Did anyone got a chance to look into this?

Re: Monitoring the Windows Event Log

Posted: Thu Aug 08, 2019 5:29 am
by amitgupta19
Can anyone guide me here?

Re: Monitoring the Windows Event Log

Posted: Thu Aug 08, 2019 8:43 am
by scottwilkerson
What version of NSClient are you running?

Can you share your nsclient.ini ?

Re: Monitoring the Windows Event Log

Posted: Thu Aug 08, 2019 9:37 am
by amitgupta19
Version of the nsclient

[amgupta@cblnagios01 libexec]$ ./check_nrpe -H 172.23.1.83
I (0,4,1,105 2014-04-28) seem to be doing fine...

nsclient.ini is attached here with