Unknown command: $ in using check_eventlog with check_nrpe

[scottwilkerson]

In re to "what you have configured for check_nrpe in the GUI", which file are you referring to?

In the GUI Configuration -> Select Commands
What does it say by check_nrpe ?

In the CLI, in /usr/local/nagios/libexec$, I ran the command and CHECK_NRPE: Receive header underflow - only 0 bytes received (4 expected).

This looks like check_nrpe may not even be able to communicate with your nsclient machine, do you get anything with just this

Code: Select all

./check_nrpe - H 10.11.96.130

If not are you sure port 5666 is not being blocked by the Windows firewall?

[raydx]

In the GUI Configuration -> Select Commands for check_nrpe:
$USER1$/check_nrpe -H $HOSTADDRESS$ -t 120 -c $ARGS$
$USER1$/check_nrpe -H $HOSTADDRESS$ -t 120 -c (not an $ARGn$ index: "S")

Running ./check_nrpe - H 10.11.96.130 does return NRPE v3.2.1

I don't think it is an firewall issue as other checks are functioning.

[scottwilkerson]

Code: Select all

# 'check_nrpe' command definition
define command{
	command_name    check_nrpe
	command_line    $USER1$/check_nrpe -H $HOSTADDRESS$ -t 120 -c $ARG1$ -a $ARG2$
	}

as stated before you need to change the command to the above

Running ./check_nrpe - H 10.11.96.130 does return NRPE v3.2.1

This doesn't seem quite right, is 10.11.96.130 the windows machine?

[raydx]

commands.cfg updated and In the GUI Configuration:
$USER1$/check_nrpe -H $HOSTADDRESS$ -t 120 -c $ARGS$ -a $ARG2$

Status Information is NRPE Plugin for Nagios which is not correct.

10.11.96.130 is the Nagios Server running on Ubuntu v16.04

[scottwilkerson]

commands.cfg updated and In the GUI Configuration:
$USER1$/check_nrpe -H $HOSTADDRESS$ -t 120 -c $ARGS$ -a $ARG2$

This is still incorrect, it needs to be

Code: Select all

$USER1$/check_nrpe -H $HOSTADDRESS$ -t 120 -c $ARG1$ -a $ARG2$

You want to run the command using the Windows servers IP not the Nagios servers IP

[raydx]

Ok, now the GUI Configuration does show:
$USER1$/check_nrpe -H $HOSTADDRESS$ -t 120 -c $ARG1$ -a $ARG2$

On the Windows Server machine and using nscp, do I run ./check_nrpe - H 10.11.103.104 or
check_nrpe -H 10.11.103.104?

Thanks again for your assistance.

[scottwilkerson]

If 10.11.103.104 is the Windows server you would run the following from the Nagios server

Code: Select all

./check_nrpe -H 10.11.103.104

[raydx]

Running ./check_nrpe -H 10.11.103.104 returns:
I (0.5.2.35 2018-01-28) seem to be doing fine...

In the Nagios console for the check_eventlog services, I'm now seeing:
Invalid command line: unrecognised option '-a'

[scottwilkerson]

Running ./check_nrpe -H 10.11.103.104 returns:
I (0.5.2.35 2018-01-28) seem to be doing fine...

Ok, good, this looks like what we would expect

Lets run this

Code: Select all

./check_nrpe - H 10.11.103.104 -t 30 -c check_eventlog -a "filter=provider = 'Application Error' and id = 1000 and message like 'Spacelabs.SLNIService.exe'" 

If you still get

Invalid command line: unrecognised option '-a'

Lets show the output of this

Code: Select all

./check_nrpe -h

[raydx]

I ran ./check_nrpe - H 10.11.103.104 -t 30 -c check_eventlog -a "filter=provider = 'Application Error' and id = 1000 and message like 'Spacelabs.SLNIService.exe'" and the following was returned:
OK: No entries found| 'problem_count'=0;0;0