Windows Process Monitor

[lance.peterson]

I have a server we already monitor for drive space etc. But we have a service coldfusion.exe we want to get a notification if it goes over say 65% of the CPU for more than 5 minutes. What's the best way to go about this?

[ssax]

The only problem with this is the "for more than 5 minutes part", I'm unable to find a plugin that does that.

How are you currently monitoring them? (WMI, SNMP, NCPA, NSClient++)

NCPA and NSClient++ agents should support process percentage checking but not the "for more than 5 minutes part".

Here's one for NCPA as an example:

Code: Select all

/usr/local/nagios/libexec/check_ncpa.py -H X.X.X.X -t '<your token>' -M 'processes' -c 1 -q 'name=coldfusion.exe,cpu_percent=95'

[lance.peterson]

I use NSClient++.

I can be fine with not getting the 5-minute thing as I should be able to just not send the notification for 5 minutes if it is over 65% I would think.

So how would I set this up without it? Can I go through a configuration manager or another way?

[ssax]

This should work:

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H X.X.X.X -t 30 -c check_process -a process=notepad.exe "crit=user > 65"

Just go into Configure > Core Config Manager > Services and copy an existing service (or create a new one, use another service on the same host as an example of how it should be setup):
- Make sure check_command is check_nrpe
- Set $ARG1$ to: check_process
- Set $ARG2$ to: -a process=explorer.exe "warn=user > 65"
- Test, Save, Apply Config

See here if you have questions:

https://assets.nagios.com/downloads/nag ... gement.pdf

Let us know the results.

Thank you!

[lance.peterson]

Here is what I got. Not sure exactly where I went wrong looks like what you suggested.

[ssax]

Please edit your nsclient.ini and make sure you have this set under your [/settings/NRPE/server] section:

Code: Select all

allow nasty characters =  1

Then restart the nsclient++ service and try again.