How to Setup check_winevent?

[gdolidze]

I followed the pdf but I get this on the nagios server

OK: No data received yet

[tmcdonald]

Do you have anything listed under Admin -> Unconfigured Objects?

[gdolidze]

No I don't.

[lmiltchev]

Did you enter the correct IP address of your Nagios XI server and the correct NSCA password as described in our documentation?

example01.PNG

Is port 5667 open? Can you send a test check by clicking on "NSCA Daemons"->"Test NSCA daemon" from the Nagios EventLog Service Control Manager?

[gdolidze]

Ya i followed that too.

[lmiltchev]

I would recommend double checking the password and encryption/decryption that you are using. Do they match?

Run the following commands on the Nagios XI box to check:

Code: Select all

grep password /usr/local/nagios/etc/nsca.cfg
grep decryption_method /usr/local/nagios/etc/nsca.cfg

Are you entering the same password/encryption while sending your test check to XI from the Nagios EventLog Service Control Manager?

The the Windows server's IP added to the "only_from" line in the "/etc/xinetd.d/nsca"?

Code: Select all

grep only_from /etc/xinetd.d/nsca

Have you tried restarting the xinetd on the XI box?

Code: Select all

service xinetd restart

Is port 5667 open?

Code: Select all

iptables -nL | grep 5667

If none if the above instruction help you troubleshoot the issue, you can enable debugging in the Nagios EventLog Service Control Manager.