Windows event log with nrpe

[gopinathnagios]

Hi All,

Any one help me , to change last 24h in below syntax

Nsclient version : I (0.5.0.62 2016-09-14)

$USER1$/check_nrpe -H $HOSTADDRESS$ -c check_eventlog -a file="Application" "warning=count = 1" "critical=count = 3" "filter=source like 'Application Error' AND id = '1000'" unique truncate-message=300 'top-syntax=The status is: ${status}: with ${count} entries matching the ID the last 24h Log message:"${list}"'

[mcapra]

Here's the docs for the NSClient++ CheckEventLog module:
https://docs.nsclient.org/reference/win ... kEventLog/

What exactly do you want to change it to? You should be able to make the status output whatever you like with the top-syntax argument. It's just for display purposes.

If you want to change the actual time frame in which the search happens, you should be able to use the scan-range argument. There's a sample usage on the above documentation page.

[tgriep]

Thanks @mcapra for the help.
@gopinathnagios, let us know if you have any further questions in this issue.

[gopinathnagios]

Thank you @mcapra and @tgriep......

I resolved with top-syntax and scan-range arguments .

[tgriep]

Thanks for reporting back. Shall I mark the post as solved and lock it?

[gopinathnagios]

Yes, you can lock the post

[bolson]

Closing topic as resolved.

Thank you for using the Nagios Support Forum.