Page 6 of 6

Re: Command to check Windows logs

Posted: Sun Nov 08, 2015 9:26 pm
by jamesc23
My settings are exactly the same as yours and I'm still getting no filters matched an event message.

Can you please verify if the command I'm using on the server is correct for this?

Thank you.

Re: Command to check Windows logs

Posted: Mon Nov 09, 2015 1:34 pm
by tmcdonald
If this is a passive check, then the command on the XI server will not matter, as all the check information is being sent from the Windows machine. Would it be possible to downgrade NSClient to match the version in @WillemDH's post? We're somewhat running out of ideas here.

Re: Command to check Windows logs

Posted: Tue Nov 10, 2015 9:26 pm
by jamesc23
Trying to search for older version that was used in the guide. Can't find anything from google :-(

Re: Command to check Windows logs

Posted: Tue Nov 10, 2015 9:55 pm
by Box293
It seems as though the author has removed all old versions.

I suggest sticking with the latest version and create a forum post in the NSClient++ forums:

http://forums.nsclient.org/

Re: Command to check Windows logs

Posted: Wed Nov 11, 2015 5:17 am
by WillemDH
Seems Michael removed all old versions and all old documentation too... :(

I'm absolutely not looking forward to upgrading my very stable 0.4.1.105 to 0.4.3 or later.

Re: Command to check Windows logs

Posted: Wed Nov 11, 2015 4:23 pm
by tmcdonald
I don't know what else we can do at this point. Nagios Logserver definitely would make this whole process easier and is something we can do bugfixes for since it's our own product. I know that's not the answer you probably want to hear, but we developed it partially as a result of running into just this sort of problem.

Re: Command to check Windows logs

Posted: Tue Dec 01, 2015 7:37 am
by WillemDH
Just FYI, I have discussed this with Michael Medin and he knows the real-time eventlog monitoring has issues. He said it's next on his to do list to fix this. As far as I know the only reliable NSClent version where real-time eventlog monitoring works as advertized is 0.4.1.105.

Check out https://github.com/mickem/nscp/issues/204 if you want to be up to date with latest develoments of real-time eventlog monitoring on NSClient 0.5.0.x

Re: Command to check Windows logs

Posted: Tue Dec 01, 2015 10:21 am
by tmcdonald
Thanks for the update, @WillemDH. If it's alright with the OP I would like to close this thread. I think we're beyond the realm of what we can address from our end, barring using Logserver (last pitch, I promise).

Re: Command to check Windows logs

Posted: Tue Dec 01, 2015 6:06 pm
by Box293
I also asked Michael Medin if he is going to make the old versions available and his plan is to add them to GitHub, he's just not got to it yet.

https://forums.nsclient.org/t/access-to ... sions/3946