Command to check Windows logs

[jamesc23]

My settings are exactly the same as yours and I'm still getting no filters matched an event message.

Can you please verify if the command I'm using on the server is correct for this?

Thank you.

[tmcdonald]

If this is a passive check, then the command on the XI server will not matter, as all the check information is being sent from the Windows machine. Would it be possible to downgrade NSClient to match the version in @WillemDH's post? We're somewhat running out of ideas here.

[jamesc23]

Trying to search for older version that was used in the guide. Can't find anything from google

[Box293]

It seems as though the author has removed all old versions.

I suggest sticking with the latest version and create a forum post in the NSClient++ forums:

http://forums.nsclient.org/

[WillemDH]

Seems Michael removed all old versions and all old documentation too...

I'm absolutely not looking forward to upgrading my very stable 0.4.1.105 to 0.4.3 or later.

[tmcdonald]

I don't know what else we can do at this point. Nagios Logserver definitely would make this whole process easier and is something we can do bugfixes for since it's our own product. I know that's not the answer you probably want to hear, but we developed it partially as a result of running into just this sort of problem.

[WillemDH]

Just FYI, I have discussed this with Michael Medin and he knows the real-time eventlog monitoring has issues. He said it's next on his to do list to fix this. As far as I know the only reliable NSClent version where real-time eventlog monitoring works as advertized is 0.4.1.105.

Check out https://github.com/mickem/nscp/issues/204 if you want to be up to date with latest develoments of real-time eventlog monitoring on NSClient 0.5.0.x

[tmcdonald]

Thanks for the update, @WillemDH. If it's alright with the OP I would like to close this thread. I think we're beyond the realm of what we can address from our end, barring using Logserver (last pitch, I promise).

[Box293]

I also asked Michael Medin if he is going to make the old versions available and his plan is to add them to GitHub, he's just not got to it yet.

https://forums.nsclient.org/t/access-to ... sions/3946