Re: check_wmi_plus and check_win_eventlog showing no events
Posted: Tue Jun 21, 2016 8:30 am
I have tried making the account a local admin on the server with no success.
Support for Nagios products and services
https://support.nagios.com/forum/
Code: Select all
Command Line (v1.59): /usr/local/nagios/bin/plugins/check_wmi_plus/check_wmi_plus.pl -H 10.3.1.211 -u USER -p PASS -m checkeventlog -d
Conf File Dir: /usr/local/nagios/bin/plugins/check_wmi_plus
Loaded Conf File /usr/local/nagios/bin/plugins/check_wmi_plus/check_wmi_plus.conf
Round #1 of 1
QUERY: /bin/wmic '-U' 'USER%PASS' '--namespace' 'root/cimv2' '//10.3.1.211' 'Select EventCode,EventIdentifier,Type,LogFile,SourceName,Message,TimeGenerated from Win32_NTLogEvent where ( Logfile="System" ) and EventType<=1 and EventType>0 and TimeGenerated > "20160621163800.00000000"'
OUTPUT:
WMI DATA:$VAR1 = [
[
{
'_ChecksOK' => 1,
'_ItemCount' => 0
}
]
];
No In/Exclusions defined
Testing TEST VALUES $VAR1 = {
'_ChecksOK' => 1,
'_SeverityType' => 'Error',
'_EventList' => '',
'_ItemCount' => 0
};
WARNING SPECS: $VAR1 = undef;
CRITICAL SPECS: $VAR1 = undef;
------------ Critical Check ------------
------------ Warning Check ------------
------------ End Check ------------
Data Passed back from check: $VAR1 = {
'_DisplayMsg' => 'OK',
'_EventList' => '',
'_TestResult' => 0,
'_ChecksOK' => 1,
'_SeverityType' => 'Error',
'_StatusType' => 'OK',
'_ItemCount' => 0,
'_Triggers' => ''
};
---------- Building Up Display
Incoming Data $VAR1 = {
'_submode' => '',
'_nodatastring' => 'WMI Query returned no data. The item you were looking for may NOT exist or the software that creates the WMI Class may not be running, or all data has been excluded.
',
'_TestResult' => 0,
'_arg5' => '',
'_ChecksOK' => 1,
'_host' => '10.3.1.211',
'_nodatamode' => '',
'_mode' => 'checkeventlog',
'_savedbytefactor' => '',
'_ItemCount' => 0,
'_arg3' => 1,
'_EventList' => '',
'_DisplayMsg' => 'OK',
'_arg1' => 'System',
'_arg2' => '',
'_timeout' => '',
'_StatusType' => 'OK',
'_SeverityType' => 'Error',
'_delay' => '',
'_bytefactor' => 1024,
'_arg4' => 'eventdefault',
'_nodataexit' => '',
'_Triggers' => ''
};
------- Processing _DisplayMsg||~|~| - ||
Complex Format:_DisplayMsg,,~,~, - ,,
_DisplayMsg||~|~| - || ----> OK -
------- Processing _ItemCount| event(s)|~|~| ||
Complex Format:_ItemCount, event(s),~,~, ,,
_ItemCount| event(s)|~|~| || ----> 0 event(s)
------- Processing _SeverityType||~|~||of Severity Level: "|"
Complex Format:_SeverityType,,~,~,,of Severity Level: ","
_SeverityType||~|~||of Severity Level: "|" ----> of Severity Level: "Error",
------- Processing _arg3| hours|~|~|~|were recorded in the last |
Complex Format:_arg3, hours,~,~,~,were recorded in the last ,
_arg3| hours|~|~|~|were recorded in the last | ----> were recorded in the last 1 hours
------- Processing _arg1||~|~|~| from the | Event Log.
Complex Format:_arg1,,~,~,~, from the , Event Log.
_arg1||~|~|~| from the | Event Log. ----> from the System Event Log.
------- Processing _EventList||~|~|~||
Complex Format:_EventList,,~,~,~,,
_EventList||~|~|~|| ---->
---------- Building Up Performance Data
------- Processing _ItemCount||Event Count
Complex Format:_ItemCount,,Event Count
_ItemCount||Event Count (Field=_ItemCount) ----> 'Event Count'=0;;;
---------- Done
OUT:OK - 0 event(s) of Severity Level: "Error", were recorded in the last 1 hours from the System Event Log.|'Event Count'=0;
OK - 0 event(s) of Severity Level: "Error", were recorded in the last 1 hours from the System Event Log.|'Event Count'=0;Code: Select all
/usr/local/nagios/bin/plugins/check_wmi_plus/check_wmi_plus.pl -H 10.3.1.211 -u USER -p PASS -m checkeventlog -a application -o 2 -3 4 -dCode: Select all
/usr/local/nagios/bin/plugins/check_wmi_plus/check_wmi_plus.pl -H HOST -u USER -p PASS -m checkeventlog -o 3 -3 24 -dCode: Select all
OK - 0 event(s) of Severity Level: "Error,Warning,Information", were recorded in the last 24 hours from the System Event Log.|'Event Count'=0;