Monitor windows eventlogs
Posted: Wed Apr 17, 2013 3:38 am
Hi,
I need to monitor our event logs on some of our windows machines. But I can't figure it out.
When I try the following command:
The output I'm getting is :
In my nsclient.ini file I have the following:
I have tried to restart the NSclient but no luck.
Many thanks in advance! /Joakim
I need to monitor our event logs on some of our windows machines. But I can't figure it out.
Code: Select all
/usr/local/nagios/libexec$ ./check_nrpe -H 192.168.26.12
I (0,4,1,90 2013-02-04) seem to be doing fine...
Code: Select all
/usr/local/nagios/libexec$ ./check_nrpe -H 192.168.26.12 -p 5666 -c CheckEventLog -a filter=new file="system" MaxWarn=1 MaxCrit=1 filter-generated=\<1h filter-eventType==error filter=in filter=all
The output I'm getting is :
Code: Select all
Exception processing request: Request contained arguments (not currently allowed, check the allow arguments option).Code: Select all
:/usr/local/nagios/libexec$ ./check_nrpe -H 192.168.26.12 -p 5665 -t 60 -c CheckEventLog -a file=System file=application filter=in MaxWarn=1 MaxCrit=3 "filter+generated=\\<1h" "filter-eventType==warning" filter=all
CHECK_NRPE: Socket timeout after 60 seconds.Code: Select all
; Undocumented section
[/modules]
; COMMAND ALLOW NASTY META CHARS - This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
allow nasty characters = 1
; COMMAND ARGUMENT PROCESSING - This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments = 1
; PORT NUMBER - Port to use for NRPE.
port = 5666
; CheckDisk - CheckDisk can check various file and disk related things. The current version has commands to check Size of hard drives and directories.
CheckDisk = 1
; Event log Checker. - Check for errors and warnings in the event log. This is only supported through NRPE so if you plan to use only NSClient this wont help you at all.
CheckEventLog = 1
; Check External Scripts - A simple wrapper to run external scripts and batch files.
CheckExternalScripts = 1
; Undocumented key
CheckExternalScripts.dll = enabled
; Helper function - Various helper function to extend other checks. This is also only supported through NRPE.
CheckHelpers = 1
; Check NSCP - Checkes the state of the agent
CheckNSCP = 1
; CheckSystem - Various system related checks, such as CPU load, process state, service state memory usage and PDH counters.
CheckSystem = 1
; CheckWMI - CheckWMI can check various file and disk related things. The current version has commands to check Size of hard drives and directories.
CheckWMI = 1
; NRPE server - A simple server that listens for incoming NRPE connection and handles them.
NRPEServer = 1
; NSCAClient - Passive check support over NSCA.
NSCAClient = 1
; NSClient server - A simple server that listens for incoming NSClient (check_nt) connection and handles them. Although NRPE is the preferred method NSClient is fully supported and can be used for simplicity or for compatibility.
NSClientServer = 1Many thanks in advance! /Joakim