Page 1 of 1

Windows EventLog with NSClient

Posted: Fri Jul 12, 2013 5:10 am
by keane1981
Hi everybody!

I am trying to check some errors that we have in a eventlog of a server but I received an error.

I execute this command:

./check_nrpe -H 172.17.24.176 -p 5666 -c CheckEventLog -t 30 -a file="system" filter=new filter=out MaxWarn=1 MaxCrit=1 filter-generated=\>1h filter+severity==error filter-severity==success filter-severity==informational filter=in filter=all truncate=1023 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"

I dont understand some of the parameters, but I receive this:

Could not construct return packet in NRPE handler check client side (nsclient.log) logs...

Thanks for your help!

Re: Windows EventLog with NSClient

Posted: Fri Jul 12, 2013 9:22 am
by slansing
Do you have allow_arguments, and allow_nastymetacharacters enabled "set to 1" in the nsclient/nsc.ini file?

Can you also post your nsclient.log file?

Re: Windows EventLog with NSClient

Posted: Mon Jul 15, 2013 2:39 am
by keane1981
Hi!!

Thanks for your answer and help.
Here you have the file. I did it, but I get the same issue.

Thanks

Re: Windows EventLog with NSClient

Posted: Mon Jul 15, 2013 4:17 am
by keane1981
Hi,

It is working!!!!!!!!! with that:

./check_nrpe -H 172.17.24.168 -c CheckEventLog -a filter=new file="Application" MaxWarn="1" MaxCrit="1" filter-generated=\>15m filter+eventSource="Siebel Application" filter+eventType==Error filter+message=substr: unique truncate=1000 filter=in filter=all descriptions syntax=%message%

Could you tell me what is the next step?
How to define a command like this?

Thanks a lot!

Re: Windows EventLog with NSClient

Posted: Mon Jul 15, 2013 9:34 am
by slansing
Take a look at this page:

http://nagios.sourceforge.net/docs/3_0/ ... ml#command

It will show you how to take the command you ran and turn it into a nagios command.

Re: Windows EventLog with NSClient

Posted: Tue Jul 16, 2013 4:36 am
by keane1981
Thanks slansing, it is working!