What Constitutes a "Logon Error" in Windows Server Wizard?

[rmc123]

I'm using Nagios XI Version 5.5.1 and its Configuration Wizard for Windows Server.

I've installed the NSClient++ v0.4.4 on about 10 Windows servers (varying between 2008-2016) and part of my monitoring setup is using the premade Performance Counter "\\Server\\Errors Logon"

I've gotten critical status on all machines, as I've had anywhere from a few dozen to several hundred login errors reported since the last reboot. It seems very high considering all of the servers' uptimes are under a month, some just a few days.

I was hoping to see exactly what the NSClient was monitoring to check on this. I was not sure if it was Security Logs as I am not seeing as many Audit Failures as are reported.

[cdienger]

As far as I am aware, nsclient++ pulls the value from the Windows counter. You can use the perfmon program on the Windows machine to check the same counter and compare. You may also find better info from the nsclient++ team - https://forums.nsclient.org/ .