NagEventLog license

[tgfde]

Sent log via PM.

Thanks.

[sreinhardt]

Well unfortunately that log just shows more of the same. Per microsoft, the suggested resolve for the error that keeps getting logged is:

1. Locate and then click the following key in the registry:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Power

2. On the Edit menu, point to New, and then click DWORD (32-bit) Value.
3. Type SkipTickOverride, and then press ENTER.
4. On the Edit menu, click Modify.
5. Type 0, and then click OK.
6. Reboot the computer.

Since it has only been mentioned that it works via cli, but not actually shown the output. Could you try running the following and sending us all the output? Of course fill in the arguments and host address as they should be if you were running it normally not from nagios.

Code: Select all

#As root user
cd /usr/local/nagios/libexec
./check_nrpe -H $HOSTADDRESS$ -c CheckEventLog -a file=$ARG1$ MaxWarn=$ARG2$ MaxCrit=$ARG3$ "filter=generated gt $ARG4$ AND source = '$ARG5$' AND id IN ('$ARG6$')" truncate=800 unique descriptions "syntax=%severity%: %source%: %id%: %message% (%count%)"
su -s /bin/bash nagios
./check_nrpe -H $HOSTADDRESS$ -c CheckEventLog -a file=$ARG1$ MaxWarn=$ARG2$ MaxCrit=$ARG3$ "filter=generated gt $ARG4$ AND source = '$ARG5$' AND id IN ('$ARG6$')" truncate=800 unique descriptions "syntax=%severity%: %source%: %id%: %message% (%count%)"
exit

Another thing that doesn't appear to have been mentioned, what version of nsclient did you end up going with?

[tgfde]

Below are the results.

[root@ nagios~]# cd /usr/local/nagios/libexec

[root@nagios libexec]# ./check_nrpe -H HOSTADDRESS -c CheckEventLog -a file=system MaxWarn=1 MaxCrit=1 "filter=generated gt -5m AND source = '2019' A ND id IN ('$ARG6$')" truncate=800 unique descriptions "syntax=%severity%: %source%: %id%: %message% (%count%)"
Eventlog check ok|'eventlog'=0;1;1;

[root@nagios libexec]# su -s /bin/bash nagios
[nagios@nagios libexec]$

[root@nagios libexec]$ ./check_nrpe -H HOSTADDRESS -c CheckEventLog -a file=system MaxWarn=1 MaxCrit=1 "filter=generated gt -5m AND source = '2019' A ND id IN ('$ARG6$')" truncate=800 unique descriptions "syntax=%severity%: %source%: %id%: %message% (%count%)"
Eventlog check ok|'eventlog'=0;1;1;


nslient version - 0.3.8

Thanks.

[tgfde]

The issue is fixed.

Abrist was right, the command was being truncated. I removed the 'source' argument and it started working.

Thank you for all your help.