CheckLog for WINDOWs ..

[rmank]

Can some one help me with the command line using nrpe and checkLog to get an alert when below details are satisfied ?

- event log ""Application""
- type ""Warning""
- sources ""Sophos Anti-Virus"" and ""SophosAntiVirus""
- categories ""Virus"" and ""Virus/spyware"""

----------This some where I could at least get some details ..but not fully succeeded ...........
./check_nrpe -H srvcldmlcd001 -p 5666 -c CheckEventLog -a file=System file=application MaxWarn=1 MaxCrit=1 "filter=generated > -10m AND severity NOT IN ('success', 'informational') AND source NOT in ('invalid')" unique descriptions "syntax=Time:%generated%, Event ID:%id%, Source=%source%, Type=%level% Location=%file%"

[rkennedy]

What is the current result when you run that command?

[rmank]

its not giving anything as output !

[Box293]

What version of NSClient++ are you using?

Have a look at this guide, it might answer a few questions:
http://outsideit.net/real-time-eventlog-monitoring/

[rmank]

Thanks a lot .I am able to check the logs now !
Please close the thread ..!