Page 3 of 4
Re: NagEventLog license
Posted: Mon Aug 11, 2014 4:26 pm
by tgfde
I was but removed it and still the same issue.
Thanks.
Re: NagEventLog license
Posted: Tue Aug 12, 2014 4:16 pm
by tmcdonald
Let's get a copy of your profile. In the XI web interface, go to Admin -> System Profile and click the blue "Download Profile" button. Then send that profile.zip in a private message to myself.
Tech Note: Profile received and placed in directory.
Re: NagEventLog license
Posted: Thu Aug 14, 2014 11:11 am
by tgfde
Hi tmcdonald,
Any update based on the profile I sent to you.
Thanks.
Re: NagEventLog license
Posted: Thu Aug 14, 2014 5:00 pm
by abrist
Can we see what command is being run on the windows side? (there should be a line in the nsclient log)
I have a suspicion that the filter is not getting used at all - the command may be truncated.
Re: NagEventLog license
Posted: Mon Aug 18, 2014 9:21 am
by tgfde
I'm not seeing a command in the nsclient.log
Thanks.
Re: NagEventLog license
Posted: Mon Aug 18, 2014 9:24 am
by tgfde
This is the only thing I'm seeing in the log, which is not related to my current issue, I think.
2014-08-18 09:22:46: error:modules\CheckSystem\PDHCollector.cpp:215: Failed to query performance counters: \Processor(_total)\% Processor Time: PdhGetFormattedCounterValue failed: A counter with a negative denominator value was detected. (800007D6)
Thanks,
Re: NagEventLog license
Posted: Mon Aug 18, 2014 4:56 pm
by slansing
Does running the command manually from the CLI still show an OK state? Also, what is the name of the host you are running this check against?
Re: NagEventLog license
Posted: Tue Aug 19, 2014 2:27 pm
by tgfde
Yes, corpbuild1.
Thanks.
Re: NagEventLog license
Posted: Wed Aug 20, 2014 2:18 pm
by tmcdonald
Since the command seems to have changed a few times, can you please provide the following?
- The command as it is defined in the Nagios server
- The command as it is defined on the Windows server
- A copy of your nsclient logfile
Feel free to PM the log if it contains sensitive info.
Tech Note: Log received and placed in directory
Re: NagEventLog license
Posted: Wed Aug 20, 2014 3:37 pm
by tgfde
Nagios:
Code: Select all
$USER1$/check_nrpe -H $HOSTADDRESS$ -c CheckEventLog -a file=$ARG1$ MaxWarn=$ARG2$ MaxCrit=$ARG3$ "filter=generated gt $ARG4$ AND source = '$ARG5$' AND id IN ('$ARG6$')" truncate=800 unique descriptions "syntax=%severity%: %source%: %id%: %message% (%count%)"
Windows:
Code: Select all
alias_event_log_old=CheckEventLog file=application file=system filter=new filter=out MaxWarn=1 MaxCrit=1 filter-generated=>2d filter-severity==success filter-severity==informational truncate=800 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"
alias_event_log_new=CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=generated gt -2d AND severity NOT IN ('success', 'informational')" truncate=800 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"
alias_event_log=alias_event_log_new