check_eventlog Nsclient

[rambertnala]

Hi friends

I have Nsclient 0.5.2.35 2018-01-28 installed in a server Windows. I wanna check eventlog of only one scheduled task.

I am trying to check in this way

./check_nrpe -H "IP_SRV" -2 -t 70 -p 5666 -c check_eventLog -a file=Microsoft-Windows-TaskScheduler/Operational "filter=written gt -30m AND level='error' AND id='101'" unique=1

Is there any way to filter taskname??? To avoid critical messages from other Tasks ????

And where can i get information about top-syntax, detail-syntax, to get outputs

Thanks in advance and regards

[kg2857]

You probably WANT TO LOOK IN NSCLIENT.INI TO SEE HOW THE (sorry) check_eventLog command is defined on the remote host and run the plugin with -h or no args to see the options.

[rambertnala]

Hi.

I do not have any command. I have activated eventlog module CheckEventLog = 1

I send command from Nagios Server

[kg2857]

Ah, then you'll need to read the nsclient documentation.

[rambertnala]

I have read documentation but no luck about it...

Any idea????