Windows EventLog with NSClient

[keane1981]

Hi everybody!

I am trying to check some errors that we have in a eventlog of a server but I received an error.

I execute this command:

./check_nrpe -H 172.17.24.176 -p 5666 -c CheckEventLog -t 30 -a file="system" filter=new filter=out MaxWarn=1 MaxCrit=1 filter-generated=\>1h filter+severity==error filter-severity==success filter-severity==informational filter=in filter=all truncate=1023 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"

I dont understand some of the parameters, but I receive this:

Could not construct return packet in NRPE handler check client side (nsclient.log) logs...

Thanks for your help!

[slansing]

Do you have allow_arguments, and allow_nastymetacharacters enabled "set to 1" in the nsclient/nsc.ini file?

Can you also post your nsclient.log file?

[keane1981]

Hi!!

Thanks for your answer and help.
Here you have the file. I did it, but I get the same issue.

Thanks

[keane1981]

Hi,

It is working!!!!!!!!! with that:

./check_nrpe -H 172.17.24.168 -c CheckEventLog -a filter=new file="Application" MaxWarn="1" MaxCrit="1" filter-generated=\>15m filter+eventSource="Siebel Application" filter+eventType==Error filter+message=substr: unique truncate=1000 filter=in filter=all descriptions syntax=%message%

Could you tell me what is the next step?
How to define a command like this?

Thanks a lot!

[slansing]

Take a look at this page:

http://nagios.sourceforge.net/docs/3_0/ ... ml#command

It will show you how to take the command you ran and turn it into a nagios command.

[keane1981]

Thanks slansing, it is working!