Better way to monitor logon errors

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
AWS
Posts: 63
Joined: Fri May 13, 2011 4:33 pm
Location: Vancouver, WA

Better way to monitor logon errors

Post by AWS »

CentOS 5.7 (final)
32bit
2011R2.2
Manual Install of XI
Gnome installed but never used
Are you using a proxy - transparent
Are you using SSL: No

I'm monitoring a performance counter on a Windows server: \Server\Errors Logon
and it's working just fine. However, the behavior is not what I would like. I have no way to reset this counter unless I reboot the server, which, just isn't going to happen. So the counter keeps rising and rising. As a temp, I have set the "MaxWarn" and "MaxCrit" to ridiculously high values but that nullifies the use of this monitor.

Is it possible to have Nagios notify me on a change of this value (when it's incremented) as opposed to having a min/max threshold? I don't care what the cumulative total is. Then to put this monitor in a "Warning" state until I acknowledge?

Current monitoring values:

Code: Select all

Check command: check_nrpe
$ARG1$: CheckCounter
$ARG2$: -a "Counter:Logon Errors=\\Server\\Errors Logon" ShowAll MaxWarn=999 MaxCrit=9999
Thanks
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Better way to monitor logon errors

Post by scottwilkerson »

I would use NagEventLog for this type of item
http://exchange.nagios.org/directory/Ad ... og/details
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Locked