Getting this error
TGCS001 Check Event Logs Notifications for this service have been disabled CRITICAL 02-09-2017 12:44:07 0d 0h 42m 54s 3/3 warning: EventLog: The system uptime is 42648 seconds. (1), eventlog: 1 > critical
This event is event id 6013 and is an informational event not an Error or Warning I only want Error and Warning events to be checked.
My code service definition
Code: Select all
define service {
host_name TGCS001
service_description Check Event Logs
check_command check_nrpe!alias_event_log
servicegroups Event Logs
check_interval 1
use generic-service
}
My NSClient.INI entry nsclient is 4.1.73 version
Code: Select all
; alias_event_log - Alias for alias_event_log. To configure this item add a section called: /settings/external scripts/alias/alias_event_log
alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=generated gt -1h AND severity NOT IN ('success', 'informational') AND source != 'SideBySide'" truncate=800 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"
So why is this information event alerting?
After a hour it will clear but it should never error in the first place
What is wrong with my code?
Thanks
Tom