compatibility issue with NSClient++ 0.5.1.44

[nms_system_support]

Hello,

We have Nagios XI 5.3.3 and we are trying to get services status from a Windows 2012 R2 machine with NSClient++ 0.5.1.44.

Do you know if there are any compatibility issues? We receive the error: NSClient - ERROR: No performance data from command:

We did try with NSClient++ 0.4.4 but we face issues with 12489 port.

Thank you

[npolovenko]

Hello, @nms_system_support. It's hard to tell without some more information. Do all service checks fail when you're using NSClient++ 0.5.1.44? Did you ever have any version of NSClient working ok on your Windows 2012 R2 server? What kind of problems did you have with the port 12489? Perhaps that was a firewall issue?
Also, if you could attach nsclient.ini file and tell us how you run the command, that would be very helpful.

[nms_system_support]

Hello,

This is the first time that we are trying to connect a Windows 20012R2 to Nagios and this is the first time we are using NSClient++ 0.5.1.44.

In the attachment you can see a print screen from Nagios.

With NSClient++ 0.4.3 and 0.4.4 the 12489 port does not goes up (not in listening state). this is not a firewall issue (we disabled it).

Below is the .ini file

Code: Select all

------------------------------------------------------------------------------------------


# If you want to fill this file with all available options run the following command:
#   nscp settings --generate --add-defaults --load-all
# If you want to activate a module and bring in all its options use:
#   nscp settings --activate-module <MODULE NAME> --add-defaults
# For details run: nscp settings --help


; in flight - TODO
[/settings/default]

; Undocumented key
allowed hosts = *.*.*.*

port=12489

; in flight - TODO
[/settings/NRPE/server]

; Undocumented key
verify mode = none

; Undocumented key
insecure = true


; in flight - TODO
[/modules]

; Undocumented key
CheckExternalScripts = disabled

; Undocumented key
CheckHelpers = disabled

; Undocumented key
CheckNSCP = disabled

; Undocumented key
CheckDisk = disabled

; Undocumented key
WEBServer = enabled

; Undocumented key
CheckSystem = disabled

; Undocumented key
NSClientServer = enabled

; Undocumented key
CheckEventLog = disabled

; Undocumented key
NSCAClient = enabled

; Undocumented key
NRPEServer = enabled

Thank you

[npolovenko]

@nms_system_support, First, please backup your nsclient.ini file to some secure place on your server. After that, you can replace the contents of the original file with the following:

Code: Select all

# If you want to fill this file with all available options run the following command:
#   nscp settings --generate --add-defaults --load-all
# If you want to activate a module and bring in all its options use:
#   nscp settings --activate-module <MODULE NAME> --add-defaults
# For details run: nscp settings --help
; TODO


[/settings/default]

; Undocumented key
password = 12345

; Undocumented key
allowed hosts = 127.0.0.1,::1,paste_nagios_server_ip_here

; CACHE ALLOWED HOSTS - If host names (DNS entries) should be cached, improves speed and security somewhat but won't allow you to have dynamic IPs for your Nagios server.
cache allowed hosts = 1

; TIMEOUT - Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out.
timeout = 30

; INBOX - The default channel to post incoming messages on
inbox = inbox

; BIND TO ADDRESS - Allows you to bind server to a specific local address. This has to be a dotted ip address not a host name. Leaving this blank will bind to all available IP addresses.
bind to = UNKNOWN


; TODO
[/settings/NRPE/server]

; Undocumented key
ssl options = 

; Undocumented key
verify mode = none

; Undocumented key
insecure = true

; PORT NUMBER - Port to use for NRPE.
port = 5666

; COMMAND ALLOW NASTY META CHARS - This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
allow nasty characters = true

; EXTENDED RESPONSE - Send more then 1 return packet to allow response to go beyond payload size (requires modified client if legacy is true this defaults to false).
extended response = 1

; COMMAND ARGUMENT PROCESSING - This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments = true

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = 1


; TODO
[/modules]

; Undocumented key
CheckExternalScripts = 1

; Undocumented key
CheckHelpers = 1

; Undocumented key
CheckEventLog = 1

; Undocumented key
CheckNSCP = 1

; Undocumented key
CheckDisk = 1

; Undocumented key
CheckSystem = 1

; Undocumented key
NSClientServer = 1

; Undocumented key
WEBSErver = 1

; Undocumented key
NRPEServer = 1

; SyslogClient - Forward information as syslog messages to a syslog server
SyslogClient = true

; SimpleFileWriter - Write status updates to a text file (A bit like the NSCA server does)
SimpleFileWriter = true

; NSCAClient - NSCA client can be used both from command line and from queries to submit passive checks via NSCA
NSCAClient = true

; NRDPClient - NRDP client can be used both from command line and from queries to check remote systes via NRDP
NRDPClient = true

; CommandClient - A command line client, generally not used except with "nscp test".
CommandClient = true

; CheckTaskSched - Check status of your scheduled jobs.
CheckTaskSched = true

; GraphiteClient - Graphite client can be used to submit graph data to a graphite graphing system
GraphiteClient = true

; CheckLogFile - File for checking log files and various other forms of updating text files
CheckLogFile = true

; NSCAServer - A server that listens for incoming NSCA connection and processes incoming requests.
NSCAServer = true

; DotnetPlugin - Plugin to load and manage plugins written in dot net.
DotnetPlugins = true

; PythonScript - Loads and processes internal Python scripts
PythonScript = true

; SMTPClient - SMTP client can be used both from command line and from queries to check remote systes via SMTP
SMTPClient = true

; LUAScript - Loads and processes internal Lua scripts
LUAScript = true

; Scheduler - Use this to schedule check commands and jobs in conjunction with for instance passive monitoring through NSCA
Scheduler = true

; CheckWMI - Check status via WMI
CheckWMI = true

; NRPEClient - NRPE client can be used both from command line and from queries to check remote systes via NRPE as well as configure the NRPE server
NRPEClient = true

; CheckNet - Network related check such as check_ping.
CheckNet = true

; SimpleCache - Stores status updates and allows for active checks to retrieve them
SimpleCache = true


; TODO
[/settings/WEB/server]

; PASSWORD - Password used to authenticate against server parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
password = 12345

; PORT NUMBER - Port to use for WEB server.
port = 8443s

; CERTIFICATE - Ssl certificate to use for the ssl server
certificate = ${certificate-path}/certificate.pem


; A set of options to configure the real time checks
[/settings/system/windows/real-time]


; Configure which services has to be in which state
[/settings/system/windows/service mapping]


; TODO
[/settings/system/windows/counters/default]

; COUNTER TYPE - The type of counter to use long, large and double
type = UNKNOWN

; COUNTER - The counter to check
counter = UNKNOWN

; COLLECTION STRATEGY - The way to handled values when collecting them: static means we keep the last known value, rrd means we store values in a buffer from which you can retrieve the average
collection strategy = UNKNOWN

; BUFFER SIZE - Size of buffer (in seconds) larger buffer use more memory
buffer size = UNKNOWN

; Interpret instances - IF we shoul interpret instance (default auto). Values: auto, true, false
instances = UNKNOWN

; FLAGS - Extra flags to configure the counter (nocap100, 1000, noscale)
flags = UNKNOWN


; TODO
[/settings/system/windows/counters]

; disk_queue_length - To configure this create a section under: /settings/system/windows/counters/disk_queue_length
disk_queue_length = UNKNOWN


; TODO
[/settings/log/file]

; MAXIMUM FILE SIZE - When file size reaches this it will be truncated to 50% if set to 0 (default) truncation will be disabled
max size = -1


; TODO
[/settings/log]

; LOG LEVEL - Log level to use. Available levels are error,warning,info,debug,trace
level = info

; DATEMASK - The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
date format = %Y-%m-%d %H:%M:%S

; FILENAME - The file to write log data to. Set this to none to disable log to file.
file name = ${exe-path}/nsclient.log


; TODO
[/settings/system/windows]

; DEFAULT LENGTH - Used to define the default interval for range buffer checks (ie. CPU).
default buffer length = 1h


; TODO
[/settings/external scripts/scripts/default]

; IGNORE PERF DATA - Do not parse performance data from the output
ignore perfdata = 0

; COMMAND - Command to execute
command = UNKNOWN


; A list of scripts available to run from the CheckExternalScripts module. Syntax is: <command>=<script> <arguments>
[/settings/external scripts/scripts]
check_ms_win_disk_load = cmd /c echo scripts\check_ms_win_disk_load.ps1 $ARG1$; exit $LastExitCode | powershell.exe /noprofile -command -
check_dum = cscript.exe //T:30 //NoLogo scripts\\versioncheck.vbs
alias_disk = CheckDriveSize MinWarn=35GB MinCrit=30GB CheckAll FilterType=FIXED


; A list of wrapped scripts (ie. scruts using a template mechanism). The template used will be defined by the extension of the script.
[/settings/external scripts/wrapped scripts]


; TODO
[/settings/external scripts/alias]
check_ms_win_disk_load = check_ms_win_disk_load
alias_disk = CheckDriveSize MinWarn=35GB MinCrit=30GB CheckAll FilterType=FIXED


; TODO
[/settings/eventlog/real-time/filters/default]

; EMPTY MESSAGE - The message to display if nothing matches the filter (generally considered the ok state).
empty message = eventlog found no records

; MAGIMUM AGE - How long before reporting "ok". If this is set to "false" no periodic ok messages will be reported only errors.
maximum age = 5m

; SYNTAX - Format string for dates
top syntax = UNKNOWN

; SEVERITY - THe severity of this message (OK, WARNING, CRITICAL, UNKNOWN)
severity = UNKNOWN

; SYNTAX - Format string for dates
ok syntax = UNKNOWN

; FILE - The eventlog record to filter on (if set to 'all' means all enabled logs)
log = UNKNOWN

; SYNTAX - Format string for dates
detail syntax = UNKNOWN

; FILTER - Scan files for matching rows for each matching rows an OK message will be submitted
filter = UNKNOWN

; COMMAND NAME - The name of the command (think nagios service name) to report up stream (defaults to alias if not set)
command = UNKNOWN

; DESTINATION - Same as destination
target = UNKNOWN

; OK FILTER - If any rows match this filter severity will escalated down to OK
ok = UNKNOWN

; DESTINATION - The destination for intercepted messages
destination = UNKNOWN

; WARNING FILTER - If any rows match this filter severity will escalated to WARNING
warning = UNKNOWN

; CRITICAL FILTER - If any rows match this filter severity will escalated to CRITICAL
critical = UNKNOWN


; A set of filters to use in real-time mode
[/settings/eventlog/real-time/filters]


; TODO
[/settings/eventlog/real-time]

; STARTUP AGE - The initial age to scan when starting NSClient++
startup age = 30m

; REAL TIME CHECKING - Spawns a background thread which detects issues and reports them back instantly.
enabled = 0

; LOGS TO CHECK - Comma separated list of logs to check
log = application,system

; DEBUG - Log missed records (useful to detect issues with filters) not useful in production as it is a bit of a resource hog.
debug = 0


; TODO
[/settings/external scripts/alias/default]
alias_disk = CheckDriveSize MinWarn=35GB MinCrit=30GB CheckAll FilterType=FIXED

; COMMAND - Command to execute
command = UNKNOWN


; TODO
[/settings/shared session]


; TODO
[/settings/crash]

; RESTART SERVICE NAME - The url to submit crash reports to
restart target = NSCP

; CRASH ARCHIVE LOCATION - The folder to archive crash dumps in
archive folder = ${crash-folder}

; RESTART - Submit crash reports to nsclient.org (or your configured submission server)
restart = true

; SUBMISSION URL - The url to submit crash reports to
submit url = https://crash.nsclient.org/post

; ARCHIVE CRASHREPORTS - Archive crash reports in the archive folder
archive = true


; A set of filters to use in real-time mode
[/settings/system/windows/real-time/checks]


; TODO
[/settings/NSClient/server]

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = 0

; PERFORMANCE DATA - Send performance data back to Nagios (set this to 0 to remove all performance data).
performance data = 1

; PORT NUMBER - Port to use for check_nt.
port = 12489


; TODO
[/settings/external scripts]

; COMMAND TIMEOUT - The maximum time in seconds that a command can execute. (if more then this execution will be aborted). NOTICE this only affects external commands not internal ones.
timeout = 60

; COMMAND ALLOW NASTY META CHARS - This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
allow nasty characters = 0

; COMMAND ARGUMENT PROCESSING - This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments = 0

; Load all scripts in a given folder - Load all scripts in a given directory and use them as commands.
script path = UNKNOWN


; TODO
[/paths]

; Path for shared-path - 
shared-path = C:\Program Files\NSClient++

; Path for module-path - 
module-path = ${shared-path}/modules

; Path for crash-folder - 
crash-folder = ${shared-path}/crash-dumps

; Path for exe-path - 
exe-path = C:\Program Files\NSClient++

; Path for certificate-path - 
certificate-path = ${shared-path}/security

; Path for base-path - 
base-path = C:\Program Files\NSClient++


; Files to be included in the configuration
[/includes]


; TODO
[/settings/eventlog]

; DEBUG - Log more information when filtering (useful to detect issues with filters) not useful in production as it is a bit of a resource hog.
debug = 0

; BUFFER_SIZE - The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
buffer size = 131072

; LOOKUP NAMES - Lookup the names of eventlog files
lookup names = 1

; SYNTAX - Set this to use a specific syntax string for all commands (that don't specify one).
syntax = UNKNOWN


; TODO
[/settings/external scripts/wrappings]

; BATCH FILE WRAPPING - 
bat = scripts\\%SCRIPT% %ARGS%

; VISUAL BASIC WRAPPING - 
vbs = cscript.exe //T:30 //NoLogo scripts\\lib\\wrapper.vbs %SCRIPT% %ARGS%

; POWERSHELL WRAPPING - 
ps1 = cmd /c echo If (-Not (Test-Path "scripts\%SCRIPT%") ) { Write-Host "UNKNOWN: Script `"%SCRIPT%`" not found."; exit(3) }; scripts\%SCRIPT% $ARGS$; exit($lastexitcode) | powershell.exe /noprofile -command -


; TARGET LIST SECTION - A list of available remote target systems
[/settings/targets]


; REALTIME FILTERS - A set of filters to use in real-time mode
[/settings/system/windows/real-time/process]


; LUA SCRIPT SECTION - Section for the PythonScripts module.
[/settings/python]


; REALTIME FILTERS - A set of filters to use in real-time mode
[/settings/system/windows/real-time/memory]


; LUA SCRIPTS SECTION - A list of scripts available to run from the LuaSCript module.
[/settings/lua/scripts]


; LUA SCRIPT SECTION - Section for the LUAScripts module.
[/settings/lua]


; CONFIGURE REALTIME CHECKING - A set of options to configure the real time checks
[/settings/logfile/real-time]

; REAL TIME CHECKING - Spawns a background thread which waits for file changes.
enabled = false


; PYTHON SCRIPTS SECTION - A list of scripts available to run from the PythonScript module.
[/settings/python/scripts]


; REMOTE TARGET DEFINITIONS - 
[/settings/graphite/client/targets]


; FILE WRITER - Section for simple file writer module (SimpleFileWriter.dll).
[/settings/writers/file]

; TIME SYNTAX - The date format using strftime format flags. This is the time of writing the message as messages currently does not have a source time.
time-syntax = %Y-%m-%d %H:%M:%S

; MESSAGE SYNTAX - The syntax of the message to write to the line. Can be any arbitrary string as well as include any of the following special keywords:${command} = The command name, ${host} the host, ${channel} the recieving channel, ${alias} the alias for the command, ${alias-or-command} = alias if set otherweise command, ${message} = the message data (no escape), ${result} or ${result_number} = The result status (number), ${epoch} = seconds since unix epoch, ${time} = time using time-format.
syntax = ${alias-or-command} ${result} ${message}

; SERVICE MESSAGE SYNTAX - The syntax of the message to write to the line. Can be any arbitrary string as well as include any of the following special keywords:${command} = The command name, ${host} the host, ${channel} the recieving channel, ${alias} the alias for the command, ${alias-or-command} = alias if set otherweise command, ${message} = the message data (no escape), ${result} or ${result_number} = The result status (number), ${epoch} = seconds since unix epoch, ${time} = time using time-format.
service-syntax = UNKNOWN

; HOST MESSAGE SYNTAX - The syntax of the message to write to the line. Can be any arbitrary string as well as include any of the following special keywords:${command} = The command name, ${host} the host, ${channel} the recieving channel, ${alias} the alias for the command, ${alias-or-command} = alias if set otherweise command, ${message} = the message data (no escape), ${result} or ${result_number} = The result status (number), ${epoch} = seconds since unix epoch, ${time} = time using time-format.
host-syntax = UNKNOWN

; FILE TO WRITE TO - The filename to write output to.
file = output.txt

; CHANNEL - The channel to listen to.
channel = FILE


; GRAPHITE CLIENT SECTION - Section for graphite passive check module.
[/settings/graphite/client]

; CHANNEL - The channel to listen to.
channel = GRAPHITE

; HOSTNAME - The host name of the monitored computer. Set this to auto (default) to use the windows name of the computer.  auto	Hostname ${host}	Hostname ${host_lc} Hostname in lowercase ${host_uc}	Hostname in uppercase ${domain}	Domainname ${domain_lc}	Domainname in lowercase ${domain_uc}	Domainname in uppercase 
hostname = auto


; SCHEDULER SECTION - Section for the Scheduler module.
[/settings/scheduler]

; THREAD COUNT - Number of threads to use.
threads = 5


; REALTIME FILTERS - A set of filters to use in real-time mode
[/settings/system/windows/real-time/cpu]


; SYSLOG CLIENT SECTION - Section for SYSLOG passive check module.
[/settings/syslog/client]

; CHANNEL - The channel to listen to.
channel = syslog

; HOSTNAME - The host name of the monitored computer. Set this to auto (default) to use the windows name of the computer.  auto	Hostname ${host}	Hostname ${host_lc} Hostname in lowercase ${host_uc}	Hostname in uppercase ${domain}	Domainname ${domain_lc}	Domainname in lowercase ${domain_uc}	Domainname in uppercase 
hostname = auto


; LOG FILE SECTION - Section for log file checker
[/settings/logfile]


; REMOTE TARGET DEFINITIONS - 
[/settings/SMTP/client/targets]


; CLIENT HANDLER SECTION - 
[/settings/SMTP/client/handlers]


; SMTP CLIENT SECTION - Section for SMTP passive check module.
[/settings/SMTP/client]

; CHANNEL - The channel to listen to.
channel = SMTP


; NSCA SERVER SECTION - Section for NSCA (NSCAServer) (check_nsca) protocol options.
[/settings/NSCA/server]

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = false

; ENCRYPTION - Name of encryption algorithm to use. Has to be the same as your agent i using or it wont work at all.This is also independent of SSL and generally used instead of SSL. Available encryption algorithms are: none = No Encryption (not safe) xor = XOR des = DES 3des = DES-EDE3 cast128 = CAST-128 xtea = XTEA blowfish = Blowfish twofish = Twofish rc2 = RC2 aes128 = AES aes192 = AES aes = AES serpent = Serpent gost = GOST
encryption = aes

; PERFORMANCE DATA - Send performance data back to nagios (set this to false to remove all performance data).
performance data = true

; PORT NUMBER - Port to use for NSCA.
port = 5667

; PAYLOAD LENGTH - Length of payload to/from the NSCA agent. This is a hard specific value so you have to "configure" (read recompile) your NSCA agent to use the same value for it to work.
payload length = 512


; TARGET - Target definition for: default
[/settings/NSCA/client/targets/default]

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = UNKNOWN

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30

; RETRIES - Number of times to retry sending.
retries = 3

; ENCRYPTION - Name of encryption algorithm to use. Has to be the same as your server i using or it wont work at all.This is also independent of SSL and generally used instead of SSL. Available encryption algorithms are: none = No Encryption (not safe) xor = XOR des = DES 3des = DES-EDE3 cast128 = CAST-128 xtea = XTEA blowfish = Blowfish twofish = Twofish rc2 = RC2 aes128 = AES aes192 = AES aes = AES serpent = Serpent gost = GOST
encryption = aes

; SSL CERTIFICATE - 
certificate = UNKNOWN

; ALLOWED CIPHERS - A better value is: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH
allowed ciphers = UNKNOWN

; VERIFY MODE - 
verify mode = UNKNOWN

; TARGET ADDRESS - Target host address
address = UNKNOWN


; CLIENT HANDLER SECTION - 
[/settings/NSCA/client/handlers]


; NSCA CLIENT SECTION - Section for NSCA passive check module.
[/settings/NSCA/client]

; CHANNEL - The channel to listen to.
channel = NSCA

; HOSTNAME - The host name of the monitored computer. Set this to auto (default) to use the windows name of the computer.  auto	Hostname ${host}	Hostname ${host_lc} Hostname in lowercase ${host_uc}	Hostname in uppercase ${domain}	Domainname ${domain_lc}	Domainname in lowercase ${domain_uc}	Domainname in uppercase 
hostname = auto


; SCHEDULER SECTION - Section for the Scheduler module.
[/settings/scheduler/schedules]


; REMOTE TARGET DEFINITIONS - 
[/settings/NRPE/client/targets]


; TARGET - Target definition for: default
[/settings/NRDP/client/targets/default]

; SECURITY TOKEN - The security token
token = UNKNOWN

; RETRIES - Number of times to retry sending.
retries = 3

; SECURITY TOKEN - The security token
password = UNKNOWN

; TARGET ADDRESS - Target host address
address = UNKNOWN

; SECURITY TOKEN - The security token
key = UNKNOWN

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30


; SMTP CLIENT SECTION - Section for SMTP passive check module.
[/settings/NRDP/client]

; HOSTNAME - The host name of the monitored computer. Set this to auto (default) to use the windows name of the computer.  auto	Hostname ${host}	Hostname ${host_lc} Hostname in lowercase ${host_uc}	Hostname in uppercase ${domain}	Domainname ${domain_lc}	Domainname in lowercase ${domain_uc}	Domainname in uppercase 
hostname = auto

; CHANNEL - The channel to listen to.
channel = NRDP


; TARGET - Target definition for: default
[/settings/syslog/client/targets/default]

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30

; RETRIES - Number of times to retry sending.
retries = 3

; TARGET ADDRESS - Target host address
address = UNKNOWN


; CLIENT HANDLER SECTION - 
[/settings/graphite/client/handlers]


; REMOTE TARGET DEFINITIONS - 
[/settings/syslog/client/targets]


; DOT NET MODULES - Modules written in dotnet/CLR
[/modules/dotnet]


; CLIENT HANDLER SECTION - 
[/settings/syslog/client/handlers]


; TARGET - Target definition for: default
[/settings/graphite/client/targets/default]

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30

; PATH FOR STATUS - Path mapping for status
status path = system.${hostname}.${check_alias}.status

; SEND STATUS - Send status data to this server
send status = true

; PATH FOR METRICS - Path mapping for metrics
path = system.${hostname}.${check_alias}.${perf_alias}

; TARGET ADDRESS - Target host address
address = UNKNOWN

; SEND PERF DATA - Send performance data to this server
send perfdata = true

; RETRIES - Number of times to retry sending.
retries = 3


; CLIENT HANDLER SECTION - 
[/settings/NRPE/client/handlers]


; CACHE - Section for simple cache module (SimpleCache.dll).
[/settings/cache]

; CHANNEL - The channel to listen to.
channel = CACHE

; PRIMARY CACHE INDEX - Set this to the value you want to use as unique key for the cache. Can be any arbitrary string as well as include any of the following special keywords:${command} = The command name, ${host} the host, ${channel} the recieving channel, ${alias} the alias for the command, ${alias-or-command} = alias if set otherweise command, ${message} = the message data (no escape), ${result} = The result status (number).
primary index = ${alias-or-command}


; REMOTE TARGET DEFINITIONS - 
[/settings/NRDP/client/targets]


; REALTIME FILTERS - A set of filters to use in real-time mode
[/settings/logfile/real-time/checks]


; TARGET - Target definition for: default
[/settings/NRPE/client/targets/default]

; Insecure legacy mode - Use insecure legacy mode to connect to old NRPE server
insecure = UNKNOWN

; ALLOWED CIPHERS - A better value is: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH
allowed ciphers = UNKNOWN

; TARGET ADDRESS - Target host address
address = UNKNOWN

; VERIFY MODE - 
verify mode = UNKNOWN

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = UNKNOWN

; RETRIES - Number of times to retry sending.
retries = 3

; PAYLOAD LENGTH - Length of payload to/from the NRPE agent. This is a hard specific value so you have to "configure" (read recompile) your NRPE agent to use the same value for it to work.
payload length = UNKNOWN

; SSL CERTIFICATE - 
certificate = UNKNOWN

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30


; TARGET - Target definition for: default
[/settings/SMTP/client/targets/default]

; RETRIES - Number of times to retry sending.
retries = 3

; TARGET ADDRESS - Target host address
address = UNKNOWN

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30


; CLIENT HANDLER SECTION - 
[/settings/NRDP/client/handlers]


; REMOTE TARGET DEFINITIONS - 
[/settings/NSCA/client/targets]


; NRPE CLIENT SECTION - Section for NRPE active/passive check module.
[/settings/NRPE/client]

; CHANNEL - The channel to listen to.
channel = NRPE

PS: Don't forget to add Nagios server IP address to the allowed hosts, also please change all the "password" fields from 12345 to your password. When done you'd need to open "Services" on windows, find the NSClient++ service, right click it and select Restart.

[nms_system_support]

Thank you npolovenko for the answer.

We changed the ini file but now the 12489 port is not listening (is down) at Windows Server 2012R2

Somehow this has to do with the ini file (I believe)

Code: Select all

------------------------------------------------------------------------------------
# If you want to fill this file with all available options run the following command:
#   nscp settings --generate --add-defaults --load-all
# If you want to activate a module and bring in all its options use:
#   nscp settings --activate-module <MODULE NAME> --add-defaults
# For details run: nscp settings --help
; TODO


[/settings/default]

; Undocumented key
password = 

; Undocumented key
allowed hosts = 127.0.0.1,::1,NAGIOS IP

; CACHE ALLOWED HOSTS - If host names (DNS entries) should be cached, improves speed and security somewhat but won't allow you to have dynamic IPs for your Nagios server.
cache allowed hosts = 1

; TIMEOUT - Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out.
timeout = 30

; INBOX - The default channel to post incoming messages on
inbox = inbox

; BIND TO ADDRESS - Allows you to bind server to a specific local address. This has to be a dotted ip address not a host name. Leaving this blank will bind to all available IP addresses.
bind to = UNKNOWN


; TODO
[/settings/NRPE/server]

; Undocumented key
ssl options = 

; Undocumented key
verify mode = none

; Undocumented key
insecure = true

; PORT NUMBER - Port to use for NRPE.
port = 5666

; COMMAND ALLOW NASTY META CHARS - This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
allow nasty characters = true

; EXTENDED RESPONSE - Send more then 1 return packet to allow response to go beyond payload size (requires modified client if legacy is true this defaults to false).
extended response = 1

; COMMAND ARGUMENT PROCESSING - This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments = true

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = 1


; TODO
[/modules]

; Undocumented key
CheckExternalScripts = 1

; Undocumented key
CheckHelpers = 1

; Undocumented key
CheckEventLog = 1

; Undocumented key
CheckNSCP = 1

; Undocumented key
CheckDisk = 1

; Undocumented key
CheckSystem = 1

; Undocumented key
NSClientServer = 1

; Undocumented key
WEBSErver = 1

; Undocumented key
NRPEServer = 1

; SyslogClient - Forward information as syslog messages to a syslog server
SyslogClient = true

; SimpleFileWriter - Write status updates to a text file (A bit like the NSCA server does)
SimpleFileWriter = true

; NSCAClient - NSCA client can be used both from command line and from queries to submit passive checks via NSCA
NSCAClient = true

; NRDPClient - NRDP client can be used both from command line and from queries to check remote systes via NRDP
NRDPClient = true

; CommandClient - A command line client, generally not used except with "nscp test".
CommandClient = true

; CheckTaskSched - Check status of your scheduled jobs.
CheckTaskSched = true

; GraphiteClient - Graphite client can be used to submit graph data to a graphite graphing system
GraphiteClient = true

; CheckLogFile - File for checking log files and various other forms of updating text files
CheckLogFile = true

; NSCAServer - A server that listens for incoming NSCA connection and processes incoming requests.
NSCAServer = true

; DotnetPlugin - Plugin to load and manage plugins written in dot net.
DotnetPlugins = true

; PythonScript - Loads and processes internal Python scripts
PythonScript = true

; SMTPClient - SMTP client can be used both from command line and from queries to check remote systes via SMTP
SMTPClient = true

; LUAScript - Loads and processes internal Lua scripts
LUAScript = true

; Scheduler - Use this to schedule check commands and jobs in conjunction with for instance passive monitoring through NSCA
Scheduler = true

; CheckWMI - Check status via WMI
CheckWMI = true

; NRPEClient - NRPE client can be used both from command line and from queries to check remote systes via NRPE as well as configure the NRPE server
NRPEClient = true

; CheckNet - Network related check such as check_ping.
CheckNet = true

; SimpleCache - Stores status updates and allows for active checks to retrieve them
SimpleCache = true


; TODO
[/settings/WEB/server]

; PASSWORD - Password used to authenticate against server parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
password = 

; PORT NUMBER - Port to use for WEB server.
port = 8443s

; CERTIFICATE - Ssl certificate to use for the ssl server
certificate = ${certificate-path}/certificate.pem


; A set of options to configure the real time checks
[/settings/system/windows/real-time]


; Configure which services has to be in which state
[/settings/system/windows/service mapping]


; TODO
[/settings/system/windows/counters/default]

; COUNTER TYPE - The type of counter to use long, large and double
type = UNKNOWN

; COUNTER - The counter to check
counter = UNKNOWN

; COLLECTION STRATEGY - The way to handled values when collecting them: static means we keep the last known value, rrd means we store values in a buffer from which you can retrieve the average
collection strategy = UNKNOWN

; BUFFER SIZE - Size of buffer (in seconds) larger buffer use more memory
buffer size = UNKNOWN

; Interpret instances - IF we shoul interpret instance (default auto). Values: auto, true, false
instances = UNKNOWN

; FLAGS - Extra flags to configure the counter (nocap100, 1000, noscale)
flags = UNKNOWN


; TODO
[/settings/system/windows/counters]

; disk_queue_length - To configure this create a section under: /settings/system/windows/counters/disk_queue_length
disk_queue_length = UNKNOWN


; TODO
[/settings/log/file]

; MAXIMUM FILE SIZE - When file size reaches this it will be truncated to 50% if set to 0 (default) truncation will be disabled
max size = -1


; TODO
[/settings/log]

; LOG LEVEL - Log level to use. Available levels are error,warning,info,debug,trace
level = info

; DATEMASK - The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
date format = %Y-%m-%d %H:%M:%S

; FILENAME - The file to write log data to. Set this to none to disable log to file.
file name = ${exe-path}/nsclient.log


; TODO
[/settings/system/windows]

; DEFAULT LENGTH - Used to define the default interval for range buffer checks (ie. CPU).
default buffer length = 1h


; TODO
[/settings/external scripts/scripts/default]

; IGNORE PERF DATA - Do not parse performance data from the output
ignore perfdata = 0

; COMMAND - Command to execute
command = UNKNOWN


; A list of scripts available to run from the CheckExternalScripts module. Syntax is: <command>=<script> <arguments>
[/settings/external scripts/scripts]
check_ms_win_disk_load = cmd /c echo scripts\check_ms_win_disk_load.ps1 $ARG1$; exit $LastExitCode | powershell.exe /noprofile -command -
check_dum = cscript.exe //T:30 //NoLogo scripts\\versioncheck.vbs
alias_disk = CheckDriveSize MinWarn=35GB MinCrit=30GB CheckAll FilterType=FIXED


; A list of wrapped scripts (ie. scruts using a template mechanism). The template used will be defined by the extension of the script.
[/settings/external scripts/wrapped scripts]


; TODO
[/settings/external scripts/alias]
check_ms_win_disk_load = check_ms_win_disk_load
alias_disk = CheckDriveSize MinWarn=35GB MinCrit=30GB CheckAll FilterType=FIXED


; TODO
[/settings/eventlog/real-time/filters/default]

; EMPTY MESSAGE - The message to display if nothing matches the filter (generally considered the ok state).
empty message = eventlog found no records

; MAGIMUM AGE - How long before reporting "ok". If this is set to "false" no periodic ok messages will be reported only errors.
maximum age = 5m

; SYNTAX - Format string for dates
top syntax = UNKNOWN

; SEVERITY - THe severity of this message (OK, WARNING, CRITICAL, UNKNOWN)
severity = UNKNOWN

; SYNTAX - Format string for dates
ok syntax = UNKNOWN

; FILE - The eventlog record to filter on (if set to 'all' means all enabled logs)
log = UNKNOWN

; SYNTAX - Format string for dates
detail syntax = UNKNOWN

; FILTER - Scan files for matching rows for each matching rows an OK message will be submitted
filter = UNKNOWN

; COMMAND NAME - The name of the command (think nagios service name) to report up stream (defaults to alias if not set)
command = UNKNOWN

; DESTINATION - Same as destination
target = UNKNOWN

; OK FILTER - If any rows match this filter severity will escalated down to OK
ok = UNKNOWN

; DESTINATION - The destination for intercepted messages
destination = UNKNOWN

; WARNING FILTER - If any rows match this filter severity will escalated to WARNING
warning = UNKNOWN

; CRITICAL FILTER - If any rows match this filter severity will escalated to CRITICAL
critical = UNKNOWN


; A set of filters to use in real-time mode
[/settings/eventlog/real-time/filters]


; TODO
[/settings/eventlog/real-time]

; STARTUP AGE - The initial age to scan when starting NSClient++
startup age = 30m

; REAL TIME CHECKING - Spawns a background thread which detects issues and reports them back instantly.
enabled = 0

; LOGS TO CHECK - Comma separated list of logs to check
log = application,system

; DEBUG - Log missed records (useful to detect issues with filters) not useful in production as it is a bit of a resource hog.
debug = 0


; TODO
[/settings/external scripts/alias/default]
alias_disk = CheckDriveSize MinWarn=35GB MinCrit=30GB CheckAll FilterType=FIXED

; COMMAND - Command to execute
command = UNKNOWN


; TODO
[/settings/shared session]


; TODO
[/settings/crash]

; RESTART SERVICE NAME - The url to submit crash reports to
restart target = NSCP

; CRASH ARCHIVE LOCATION - The folder to archive crash dumps in
archive folder = ${crash-folder}

; RESTART - Submit crash reports to nsclient.org (or your configured submission server)
restart = true

; SUBMISSION URL - The url to submit crash reports to
submit url = https://crash.nsclient.org/post

; ARCHIVE CRASHREPORTS - Archive crash reports in the archive folder
archive = true


; A set of filters to use in real-time mode
[/settings/system/windows/real-time/checks]


; TODO
[/settings/NSClient/server]

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = 0

; PERFORMANCE DATA - Send performance data back to Nagios (set this to 0 to remove all performance data).
performance data = 1

; PORT NUMBER - Port to use for check_nt.
port = 12489


; TODO
[/settings/external scripts]

; COMMAND TIMEOUT - The maximum time in seconds that a command can execute. (if more then this execution will be aborted). NOTICE this only affects external commands not internal ones.
timeout = 60

; COMMAND ALLOW NASTY META CHARS - This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
allow nasty characters = 0

; COMMAND ARGUMENT PROCESSING - This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments = 0

; Load all scripts in a given folder - Load all scripts in a given directory and use them as commands.
script path = UNKNOWN


; TODO
[/paths]

; Path for shared-path - 
shared-path = C:\Program Files\NSClient++

; Path for module-path - 
module-path = ${shared-path}/modules

; Path for crash-folder - 
crash-folder = ${shared-path}/crash-dumps

; Path for exe-path - 
exe-path = C:\Program Files\NSClient++

; Path for certificate-path - 
certificate-path = ${shared-path}/security

; Path for base-path - 
base-path = C:\Program Files\NSClient++


; Files to be included in the configuration
[/includes]


; TODO
[/settings/eventlog]

; DEBUG - Log more information when filtering (useful to detect issues with filters) not useful in production as it is a bit of a resource hog.
debug = 0

; BUFFER_SIZE - The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
buffer size = 131072

; LOOKUP NAMES - Lookup the names of eventlog files
lookup names = 1

; SYNTAX - Set this to use a specific syntax string for all commands (that don't specify one).
syntax = UNKNOWN


; TODO
[/settings/external scripts/wrappings]

; BATCH FILE WRAPPING - 
bat = scripts\\%SCRIPT% %ARGS%

; VISUAL BASIC WRAPPING - 
vbs = cscript.exe //T:30 //NoLogo scripts\\lib\\wrapper.vbs %SCRIPT% %ARGS%

; POWERSHELL WRAPPING - 
ps1 = cmd /c echo If (-Not (Test-Path "scripts\%SCRIPT%") ) { Write-Host "UNKNOWN: Script `"%SCRIPT%`" not found."; exit(3) }; scripts\%SCRIPT% $ARGS$; exit($lastexitcode) | powershell.exe /noprofile -command -


; TARGET LIST SECTION - A list of available remote target systems
[/settings/targets]


; REALTIME FILTERS - A set of filters to use in real-time mode
[/settings/system/windows/real-time/process]


; LUA SCRIPT SECTION - Section for the PythonScripts module.
[/settings/python]


; REALTIME FILTERS - A set of filters to use in real-time mode
[/settings/system/windows/real-time/memory]


; LUA SCRIPTS SECTION - A list of scripts available to run from the LuaSCript module.
[/settings/lua/scripts]


; LUA SCRIPT SECTION - Section for the LUAScripts module.
[/settings/lua]


; CONFIGURE REALTIME CHECKING - A set of options to configure the real time checks
[/settings/logfile/real-time]

; REAL TIME CHECKING - Spawns a background thread which waits for file changes.
enabled = false


; PYTHON SCRIPTS SECTION - A list of scripts available to run from the PythonScript module.
[/settings/python/scripts]


; REMOTE TARGET DEFINITIONS - 
[/settings/graphite/client/targets]


; FILE WRITER - Section for simple file writer module (SimpleFileWriter.dll).
[/settings/writers/file]

; TIME SYNTAX - The date format using strftime format flags. This is the time of writing the message as messages currently does not have a source time.
time-syntax = %Y-%m-%d %H:%M:%S

; MESSAGE SYNTAX - The syntax of the message to write to the line. Can be any arbitrary string as well as include any of the following special keywords:${command} = The command name, ${host} the host, ${channel} the recieving channel, ${alias} the alias for the command, ${alias-or-command} = alias if set otherweise command, ${message} = the message data (no escape), ${result} or ${result_number} = The result status (number), ${epoch} = seconds since unix epoch, ${time} = time using time-format.
syntax = ${alias-or-command} ${result} ${message}

; SERVICE MESSAGE SYNTAX - The syntax of the message to write to the line. Can be any arbitrary string as well as include any of the following special keywords:${command} = The command name, ${host} the host, ${channel} the recieving channel, ${alias} the alias for the command, ${alias-or-command} = alias if set otherweise command, ${message} = the message data (no escape), ${result} or ${result_number} = The result status (number), ${epoch} = seconds since unix epoch, ${time} = time using time-format.
service-syntax = UNKNOWN

; HOST MESSAGE SYNTAX - The syntax of the message to write to the line. Can be any arbitrary string as well as include any of the following special keywords:${command} = The command name, ${host} the host, ${channel} the recieving channel, ${alias} the alias for the command, ${alias-or-command} = alias if set otherweise command, ${message} = the message data (no escape), ${result} or ${result_number} = The result status (number), ${epoch} = seconds since unix epoch, ${time} = time using time-format.
host-syntax = UNKNOWN

; FILE TO WRITE TO - The filename to write output to.
file = output.txt

; CHANNEL - The channel to listen to.
channel = FILE


; GRAPHITE CLIENT SECTION - Section for graphite passive check module.
[/settings/graphite/client]

; CHANNEL - The channel to listen to.
channel = GRAPHITE

; HOSTNAME - The host name of the monitored computer. Set this to auto (default) to use the windows name of the computer.  auto   Hostname ${host}   Hostname ${host_lc} Hostname in lowercase ${host_uc}   Hostname in uppercase ${domain}   Domainname ${domain_lc}   Domainname in lowercase ${domain_uc}   Domainname in uppercase 
hostname = auto


; SCHEDULER SECTION - Section for the Scheduler module.
[/settings/scheduler]

; THREAD COUNT - Number of threads to use.
threads = 5


; REALTIME FILTERS - A set of filters to use in real-time mode
[/settings/system/windows/real-time/cpu]


; SYSLOG CLIENT SECTION - Section for SYSLOG passive check module.
[/settings/syslog/client]

; CHANNEL - The channel to listen to.
channel = syslog

; HOSTNAME - The host name of the monitored computer. Set this to auto (default) to use the windows name of the computer.  auto   Hostname ${host}   Hostname ${host_lc} Hostname in lowercase ${host_uc}   Hostname in uppercase ${domain}   Domainname ${domain_lc}   Domainname in lowercase ${domain_uc}   Domainname in uppercase 
hostname = auto


; LOG FILE SECTION - Section for log file checker
[/settings/logfile]


; REMOTE TARGET DEFINITIONS - 
[/settings/SMTP/client/targets]


; CLIENT HANDLER SECTION - 
[/settings/SMTP/client/handlers]


; SMTP CLIENT SECTION - Section for SMTP passive check module.
[/settings/SMTP/client]

; CHANNEL - The channel to listen to.
channel = SMTP


; NSCA SERVER SECTION - Section for NSCA (NSCAServer) (check_nsca) protocol options.
[/settings/NSCA/server]

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = false

; ENCRYPTION - Name of encryption algorithm to use. Has to be the same as your agent i using or it wont work at all.This is also independent of SSL and generally used instead of SSL. Available encryption algorithms are: none = No Encryption (not safe) xor = XOR des = DES 3des = DES-EDE3 cast128 = CAST-128 xtea = XTEA blowfish = Blowfish twofish = Twofish rc2 = RC2 aes128 = AES aes192 = AES aes = AES serpent = Serpent gost = GOST
encryption = aes

; PERFORMANCE DATA - Send performance data back to nagios (set this to false to remove all performance data).
performance data = true

; PORT NUMBER - Port to use for NSCA.
port = 5667

; PAYLOAD LENGTH - Length of payload to/from the NSCA agent. This is a hard specific value so you have to "configure" (read recompile) your NSCA agent to use the same value for it to work.
payload length = 512


; TARGET - Target definition for: default
[/settings/NSCA/client/targets/default]

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = UNKNOWN

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30

; RETRIES - Number of times to retry sending.
retries = 3

; ENCRYPTION - Name of encryption algorithm to use. Has to be the same as your server i using or it wont work at all.This is also independent of SSL and generally used instead of SSL. Available encryption algorithms are: none = No Encryption (not safe) xor = XOR des = DES 3des = DES-EDE3 cast128 = CAST-128 xtea = XTEA blowfish = Blowfish twofish = Twofish rc2 = RC2 aes128 = AES aes192 = AES aes = AES serpent = Serpent gost = GOST
encryption = aes

; SSL CERTIFICATE - 
certificate = UNKNOWN

; ALLOWED CIPHERS - A better value is: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH
allowed ciphers = UNKNOWN

; VERIFY MODE - 
verify mode = UNKNOWN

; TARGET ADDRESS - Target host address
address = UNKNOWN


; CLIENT HANDLER SECTION - 
[/settings/NSCA/client/handlers]


; NSCA CLIENT SECTION - Section for NSCA passive check module.
[/settings/NSCA/client]

; CHANNEL - The channel to listen to.
channel = NSCA

; HOSTNAME - The host name of the monitored computer. Set this to auto (default) to use the windows name of the computer.  auto   Hostname ${host}   Hostname ${host_lc} Hostname in lowercase ${host_uc}   Hostname in uppercase ${domain}   Domainname ${domain_lc}   Domainname in lowercase ${domain_uc}   Domainname in uppercase 
hostname = auto


; SCHEDULER SECTION - Section for the Scheduler module.
[/settings/scheduler/schedules]


; REMOTE TARGET DEFINITIONS - 
[/settings/NRPE/client/targets]


; TARGET - Target definition for: default
[/settings/NRDP/client/targets/default]

; SECURITY TOKEN - The security token
token = UNKNOWN

; RETRIES - Number of times to retry sending.
retries = 3

; SECURITY TOKEN - The security token
password = 

; TARGET ADDRESS - Target host address
address = UNKNOWN

; SECURITY TOKEN - The security token
key = UNKNOWN

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30


; SMTP CLIENT SECTION - Section for SMTP passive check module.
[/settings/NRDP/client]

; HOSTNAME - The host name of the monitored computer. Set this to auto (default) to use the windows name of the computer.  auto   Hostname ${host}   Hostname ${host_lc} Hostname in lowercase ${host_uc}   Hostname in uppercase ${domain}   Domainname ${domain_lc}   Domainname in lowercase ${domain_uc}   Domainname in uppercase 
hostname = auto

; CHANNEL - The channel to listen to.
channel = NRDP


; TARGET - Target definition for: default
[/settings/syslog/client/targets/default]

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30

; RETRIES - Number of times to retry sending.
retries = 3

; TARGET ADDRESS - Target host address
address = UNKNOWN


; CLIENT HANDLER SECTION - 
[/settings/graphite/client/handlers]


; REMOTE TARGET DEFINITIONS - 
[/settings/syslog/client/targets]


; DOT NET MODULES - Modules written in dotnet/CLR
[/modules/dotnet]


; CLIENT HANDLER SECTION - 
[/settings/syslog/client/handlers]


; TARGET - Target definition for: default
[/settings/graphite/client/targets/default]

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30

; PATH FOR STATUS - Path mapping for status
status path = system.${hostname}.${check_alias}.status

; SEND STATUS - Send status data to this server
send status = true

; PATH FOR METRICS - Path mapping for metrics
path = system.${hostname}.${check_alias}.${perf_alias}

; TARGET ADDRESS - Target host address
address = UNKNOWN

; SEND PERF DATA - Send performance data to this server
send perfdata = true

; RETRIES - Number of times to retry sending.
retries = 3


; CLIENT HANDLER SECTION - 
[/settings/NRPE/client/handlers]


; CACHE - Section for simple cache module (SimpleCache.dll).
[/settings/cache]

; CHANNEL - The channel to listen to.
channel = CACHE

; PRIMARY CACHE INDEX - Set this to the value you want to use as unique key for the cache. Can be any arbitrary string as well as include any of the following special keywords:${command} = The command name, ${host} the host, ${channel} the recieving channel, ${alias} the alias for the command, ${alias-or-command} = alias if set otherweise command, ${message} = the message data (no escape), ${result} = The result status (number).
primary index = ${alias-or-command}


; REMOTE TARGET DEFINITIONS - 
[/settings/NRDP/client/targets]


; REALTIME FILTERS - A set of filters to use in real-time mode
[/settings/logfile/real-time/checks]


; TARGET - Target definition for: default
[/settings/NRPE/client/targets/default]

; Insecure legacy mode - Use insecure legacy mode to connect to old NRPE server
insecure = UNKNOWN

; ALLOWED CIPHERS - A better value is: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH
allowed ciphers = UNKNOWN

; TARGET ADDRESS - Target host address
address = UNKNOWN

; VERIFY MODE - 
verify mode = UNKNOWN

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = UNKNOWN

; RETRIES - Number of times to retry sending.
retries = 3

; PAYLOAD LENGTH - Length of payload to/from the NRPE agent. This is a hard specific value so you have to "configure" (read recompile) your NRPE agent to use the same value for it to work.
payload length = UNKNOWN

; SSL CERTIFICATE - 
certificate = UNKNOWN

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30


; TARGET - Target definition for: default
[/settings/SMTP/client/targets/default]

; RETRIES - Number of times to retry sending.
retries = 3

; TARGET ADDRESS - Target host address
address = UNKNOWN

; TIMEOUT - Timeout when reading/writing packets to/from sockets.
timeout = 30


; CLIENT HANDLER SECTION - 
[/settings/NRDP/client/handlers]


; REMOTE TARGET DEFINITIONS - 
[/settings/NSCA/client/targets]


; NRPE CLIENT SECTION - Section for NRPE active/passive check module.
[/settings/NRPE/client]

; CHANNEL - The channel to listen to.
channel = NRPE

[npolovenko]

@nms_system_support, Please go to the services menu on your windows server, and restart NSClient++ service.

Untitled.png

If that doesn't help, please upload the nsclient.log file here. You can find it in the same folder as nsclient.ini. You may delete the sensitive information from the log file or you can send it to me in PM if you prefer.

[nms_system_support]

Hello npolovenko,

I send you the file in pm.

we did restart the service with no results.

Should we install the client again with specific options?

Thank you

[npolovenko]

Hello, @by nms_system_support. I did receive the log file, thank you. I think all the options can pretty much be defined in the nsclient.ini file, so no need to reinstall nsclient agent at this point.
Here's a modified configuration that I think should work on your system. Please replace everything in your nsclient.ini file with the following configuration. Don't forget to replace nagios_Ip in the allowed hosts, as well as the password field.
If it fails again please send in your nsclient.log file.
Thank you.

Code: Select all

# If you want to fill this file with all available options run the following command:
#   nscp settings --generate --add-defaults --load-all
# If you want to activate a module and bring in all its options use:
#   nscp settings --activate-module <MODULE NAME> --add-defaults
# For details run: nscp settings --help
; TODO
[/settings/default]
; Undocumented key
password = 12345 
; Undocumented key
allowed hosts = 127.0.0.1,::1,NAGIOS_IP
; CACHE ALLOWED HOSTS - If host names (DNS entries) should be cached, improves speed and security somewhat but won't allow you to have dynamic IPs for your Nagios server.
cache allowed hosts = 1
; TIMEOUT - Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out.
timeout = 30
; TODO
[/modules]
; Undocumented key
CheckHelpers = 1
; Undocumented key
CheckEventLog = 1
; Undocumented key
CheckNSCP = 1
; Undocumented key
CheckSystem = 1
; Undocumented key
NSClientServer = 1
; NRPEServer - A server that listens for incoming NRPE connection and processes incoming requests.
NRPEServer = 1
; CheckExternalScripts - Execute external scripts
CheckExternalScripts = 1
; CheckDisk - CheckDisk can check various file and disk related things.
CheckDisk = 1
; A set of options to configure the real time checks
[/settings/system/windows/real-time]
; Configure which services has to be in which state
[/settings/system/windows/service mapping]
; TODO
[/settings/system/windows/counters/default]
; TODO
[/settings/system/windows/counters]
; TODO
[/settings/log/file]
; TODO
[/settings/log]
; LOG LEVEL - Log level to use. Available levels are error,warning,info,debug,trace
level = debug
; DATEMASK - The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
date format = %Y-%m-%d %H:%M:%S
; FILENAME - The file to write log data to. Set this to none to disable log to file.
file name = ${exe-path}/nsclient.log
; TODO
[/settings/system/windows]
; DEFAULT LENGTH - Used to define the default interval for range buffer checks (ie. CPU).
default buffer length = 1h
; TODO
[/settings/external scripts/scripts/default]
; IGNORE PERF DATA - Do not parse performance data from the output
ignore perfdata = 1
; A list of wrapped scripts (ie. scruts using a template mechanism). The template used will be defined by the extension of the script.
[/settings/external scripts/wrapped scripts]
; TODO
[/settings/external scripts/alias]
; TODO
[/settings/eventlog/real-time/filters/default]
; EMPTY MESSAGE - The message to display if nothing matches the filter (generally considered the ok state).
empty message = eventlog found no records
; MAGIMUM AGE - How long before reporting "ok". If this is set to "false" no periodic ok messages will be reported only errors.
maximum age = 5m
; A set of filters to use in real-time mode
[/settings/eventlog/real-time/filters]
; TODO
[/settings/eventlog/real-time]
; STARTUP AGE - The initial age to scan when starting NSClient++
startup age = 30m
; REAL TIME CHECKING - Spawns a background thread which detects issues and reports them back instantly.
enabled = 0
; LOGS TO CHECK - Comma separated list of logs to check
log = application,system
; DEBUG - Log missed records (useful to detect issues with filters) not useful in production as it is a bit of a resource hog.
debug = 0
; A list of scripts available to run from the CheckExternalScripts module. Syntax is: <command>=<script> <arguments>
[/settings/external scripts/scripts]
; TODO
[/settings/external scripts/alias/default]
; TODO
[/settings/shared session]
; TODO
[/settings/crash]
; RESTART SERVICE NAME - The url to submit crash reports to
restart target = NSCP
; CRASH ARCHIVE LOCATION - The folder to archive crash dumps in
archive folder = ${crash-folder}
; RESTART - Submit crash reports to nsclient.org (or your configured submission server)
restart = true
; SUBMISSION URL - The url to submit crash reports to
submit url = https://crash.nsclient.org/post
; ARCHIVE CRASHREPORTS - Archive crash reports in the archive folder
archive = true
; A set of filters to use in real-time mode
[/settings/system/windows/real-time/checks]
; TODO
[/settings/NSClient/server]
; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = 0
; PORT NUMBER - Port to use for check_nt.
port = 12489
; PERFORMANCE DATA - Send performance data back to Nagios (set this to 0 to remove all performance data).
performance data = 1
; TODO
[/settings/external scripts]
; COMMAND TIMEOUT - The maximum time in seconds that a command can execute. (if more then this execution will be aborted). NOTICE this only affects external commands not internal ones.
timeout = 80
; COMMAND ARGUMENT PROCESSING - This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments = true
; COMMAND ALLOW NASTY META CHARS - This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
allow nasty characters = true
; TODO
[/paths]
; Path for shared-path - 
shared-path = C:\Program Files\NSClient++
; Path for module-path - 
module-path = ${shared-path}/modules
; Path for crash-folder - 
crash-folder = ${shared-path}/crash-dumps
; Path for exe-path - 
exe-path = C:\Program Files\NSClient++
; Path for certificate-path - 
certificate-path = ${shared-path}/security
; Path for base-path - 
base-path = C:\Program Files\NSClient++
; Files to be included in the configuration
[/includes]
; TODO
[/settings/eventlog]
; DEBUG - Log more information when filtering (useful to detect issues with filters) not useful in production as it is a bit of a resource hog.
debug = 0
; LOOKUP NAMES - Lookup the names of eventlog files
lookup names = 1
; BUFFER_SIZE - The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
buffer size = 131072
; TODO
[/settings/external scripts/wrappings]
; BATCH FILE WRAPPING - 
bat = scripts\\%SCRIPT% %ARGS%
; VISUAL BASIC WRAPPING - 
vbs = cscript.exe //T:30 //NoLogo scripts\\lib\\wrapper.vbs %SCRIPT% %ARGS%
; POWERSHELL WRAPPING - 
ps1 = cmd /c echo If (-Not (Test-Path "scripts\%SCRIPT%") ) { Write-Host "UNKNOWN: Script `"%SCRIPT%`" not found."; exit(3) }; scripts\%SCRIPT% $ARGS$; exit($lastexitcode) | powershell.exe /noprofile -command -
; TODO

[/settings/NRPE/server]

; VERIFY MODE - Comma separated list of verification flags to set on the SSL socket.  default-workarounds  Various workarounds for what I understand to be broken ssl implementations no-sslv2  Do not use the SSLv2 protocol. no-sslv3  Do not use the SSLv3 protocol. no-tlsv1  Do not use the TLSv1 protocol. single-dh-use  Always create a new key when using temporary/ephemeral DH parameters. This option must be used to prevent small subgroup attacks, when the DH parameters were not generated using "strong" primes (e.g. when using DSA-parameters).   
ssl options = 

; VERIFY MODE - Comma separated list of verification flags to set on the SSL socket.  none  The server will not send a client certificate request to the client, so the client will not send a certificate. peer  The server sends a client certificate request to the client and the certificate returned (if any) is checked. fail-if-no-cert  if the client did not return a certificate, the TLS/SSL handshake is immediately terminated. This flag must be used together with peer. peer-cert  Alias for peer and fail-if-no-cert. workarounds  Various bug workarounds. single  Always create a new key when using tmp_dh parameters. client-once  Only request a client certificate on the initial TLS/SSL handshake. This flag must be used together with verify-peer   
verify mode = none

; ALLOW INSECURE CHIPHERS and ENCRYPTION - Only enable this if you are using legacy check_nrpe client.
insecure = true
allow arguments = true
allow nasty characters = true

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = 1

; PORT NUMBER - Port to use for NRPE.
port = 5666

[nms_system_support]

Hello npolovenko,

it worked!! thank you for the support!

[npolovenko]

@nms_system_support , Not a problem. You can save this config and reuse it for the future servers as well.
I will go ahead and close this thread as resolved now.