NagEventLog license

[tgfde]

I was but removed it and still the same issue.

Thanks.

[tmcdonald]

Let's get a copy of your profile. In the XI web interface, go to Admin -> System Profile and click the blue "Download Profile" button. Then send that profile.zip in a private message to myself.

Tech Note: Profile received and placed in directory.

[tgfde]

Hi tmcdonald,

Any update based on the profile I sent to you.

Thanks.

[abrist]

Can we see what command is being run on the windows side? (there should be a line in the nsclient log)
I have a suspicion that the filter is not getting used at all - the command may be truncated.

[tgfde]

I'm not seeing a command in the nsclient.log

Thanks.

[tgfde]

This is the only thing I'm seeing in the log, which is not related to my current issue, I think.

2014-08-18 09:22:46: error:modules\CheckSystem\PDHCollector.cpp:215: Failed to query performance counters: \Processor(_total)\% Processor Time: PdhGetFormattedCounterValue failed: A counter with a negative denominator value was detected. (800007D6)

Thanks,

[slansing]

Does running the command manually from the CLI still show an OK state? Also, what is the name of the host you are running this check against?

[tgfde]

Yes, corpbuild1.

Thanks.

[tmcdonald]

Since the command seems to have changed a few times, can you please provide the following?

• The command as it is defined in the Nagios server
• The command as it is defined on the Windows server
• A copy of your nsclient logfile

Feel free to PM the log if it contains sensitive info.

Tech Note: Log received and placed in directory

[tgfde]

Nagios:

Code: Select all

$USER1$/check_nrpe -H $HOSTADDRESS$ -c CheckEventLog -a file=$ARG1$ MaxWarn=$ARG2$ MaxCrit=$ARG3$ "filter=generated gt $ARG4$ AND source = '$ARG5$' AND id IN ('$ARG6$')" truncate=800 unique descriptions "syntax=%severity%: %source%: %id%: %message% (%count%)"

Windows:

Code: Select all

alias_event_log_old=CheckEventLog file=application file=system filter=new filter=out MaxWarn=1 MaxCrit=1 filter-generated=>2d filter-severity==success filter-severity==informational truncate=800 unique descriptions  "syntax=%severity%: %source%: %message% (%count%)"

alias_event_log_new=CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=generated gt -2d AND severity NOT IN ('success', 'informational')" truncate=800 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"

alias_event_log=alias_event_log_new