Page 2 of 2

Re: Nagios EventLog Service Monitor

Posted: Fri May 13, 2016 7:37 am
by snchestnut01
We set the port to 5667, so when running the first command this is the error we get:

CHECK_NRPE: Socket timeout after 10 seconds.

Re: Nagios EventLog Service Monitor

Posted: Fri May 13, 2016 12:57 pm
by rkennedy
What is the output of nmap 192.168.100.10?

Re: Nagios EventLog Service Monitor

Posted: Tue May 17, 2016 2:49 pm
by snchestnut01
Switched to check_wmi for this check. Fixed a little bit of code and changed a few arguements and adjusted the password and this one is now working for the most part. Doesn't seem to be warning us about critical issues on the server though. Here's the command string we replaced it with:

check_xi_service_wmiplus!'[Domain]/[DomainUser]'!'[password]'!checkeventlog!-a 'Application' -o 2 -3 1

How can I get it to warn us when we get a critical?

Re: Nagios EventLog Service Monitor

Posted: Tue May 17, 2016 2:50 pm
by snchestnut01

Re: Nagios EventLog Service Monitor

Posted: Tue May 17, 2016 3:37 pm
by rkennedy
You should be able to use the -w and -c variables.

Code: Select all

[root@localhost libexec]# ./check_wmi_plus.pl
No Hostname specified

Typical Usage: -H HOSTNAME -u DOMAIN/USER -p PASSWORD -m MODE [-s SUBMODE] [-b BYTEFACTOR] [-w WARN] [-c CRIT] [-a ARG1 ] [-o ARG2] [-3 ARG3] [-4 ARG4] [-A AUTHFILE] [-t TIMEOUT] [-y DELAY] [--namespace WMINAMESPACE] [--extrawmicarg EXTRAWMICARG] [--nodatamode] [--nodataexit NODATAEXIT] [--nodatastring NODATASTRING] [-d] [-z] [--inifile=INIFILE] [--inidir=INIDIR] [--inihelp] [--nokeepstate] [--keepexpiry KEXPIRY] [--keepid KID] [--joinexpiry JEXPIRY] [-v OSVERSION] [--help] [--itexthelp] [--forcewmiccommand] [-icollectusage] [--ishowusage] [--logswitch] [--logkeep] [--logsuffix SUFFIX] [--logshow] [--variablesdisabled] [--forceiniopen] [--forcetruncateoutput LEN]

Re: Nagios EventLog Service Monitor

Posted: Fri May 20, 2016 3:13 pm
by snchestnut01
Got it, thank you very much.

Re: Nagios EventLog Service Monitor

Posted: Mon May 23, 2016 9:22 am
by mcapra
Closing this and marking as resolved