NCPA - Windows event message log not listed on the alarm

[senthilc]

NCPA - Windows event message log not listed on the alarm. Agent is ncpa-2.0.6.exe

Query #1
=========

In the Query 1, it lists the message but not marked as warning.

[[email protected] ~]$ /usr/local/nagios/libexec/check_ncpa.py -H IP -t 'token123' -P 5693 -M 'logs' -q 'name=Application,severity=WARNING,application=SnapShotCheck,logged_after=4h,event_id=1' -w 1 -l list
{
"logs": [
{
"Application": [
{
"category": "1",
"severity": "WARNING",
"event_id": "1",
"application": "SnapShotCheck",
"computer_name": "domain.net",
"message": "The following VM has a snapshot older than 5 days (@{VM=Server01; Size=2.24 GB; Created=11/17/2017 20:13:24})\r\n",
"time_generated": "11/28/17 15:07:43"
}

Query #2
========

If I remove -l list, it will mark the alarm as warning but will give only the count of the event log (not the actual message of the event log like below..So this makes hard as we have to login to the server to identify what the event is all about.

[[email protected] ~]$ /usr/local/nagios/libexec/check_ncpa.py -H IP -t 'token123' -P 5693 -M 'logs' -q 'name=Application,severity=WARNING,application=SnapShotCheck,logged_after=4h,event_id=1' -w 1

WARNING: Application has 1 logs, Total Count has 1 logs (Time range - last 4 hours) | 'Application'=1;0;; 'Total Count'=1;0;;

We need the alarm as warning and list the contents of the message as well like below..

The following VM has a snapshot older than 5 days (@{VM=Server01; Size=2.24 GB; Created=11/17/2017 20:13:24})\r\n",
"time_generated": "11/28/17 15:07:43"

[kyang]

This sounds more like a feature request/enhancement?

You could file this on the Nagios GitHub and see what the NCPA developer thinks?

https://github.com/NagiosEnterprises/ncpa/issues