Nagios Support Forum

Hi guys, someone can help me to control EventID error codes with Nagios check_logfiles plugin? there is a way to exlude 4 example only some Error Codes of eventID 1058?
Thanks

Daniele

Possibly, Could you link the url to the plugin and post some example of the checks you are currently running?

4 example:

@searches = ({
tag => 'System',
type => 'eventlog',
options => 'eventlogformat="%w src:%s id:%i %m",nosavethresholdcount',
eventlog => {
eventlog => 'System',
include => {
eventtype => 'error',
eventid => '1058',
operation => 'and',
},
},
criticalthreshold => 6,
criticalpatterns => '.*'
})

I think abrist wanted you to show the actual command you would run from the command line, with the output you receive. Also if you could link to the URL of the exact plugin you are using, wherever you downloaded it from.

Sorry 4 my limited knowledge & my poor English language..... i would like to know if there is a way to filter errorcodes of EventID from MS Event Viewer, above i posted a current nagios.cfg files from a host monitored with check_logfiles plugin. (C:\Program Files\NSClientNME64\plugins\check_logfiles)

Someone can tell me if is possible exclude this errocode frome EventID 1058?:

SupportInfo1 4
SupportInfo2 840
ProcessingMode 0
ProcessingTimeInMilliseconds 2325
ErrorCode 1330
ErrorDescription Logon failure: the specified account password has expired.

Thanks a lot.

Daniele.

Could you post a link to where you found this plugin? Then we can take a look at it and actually try filtering out events and let you know if it is possible.

sreinhardt wrote:Could you post a link to where you found this plugin? Then we can take a look at it and actually try filtering out events and let you know if it is possible.

Here:

https://labs.consol.de/repo/stable/#_centos_redhat

Thanks

That is a linux based set of repo lists, how does this apply to something you have running on a windows machine?

sorry Nagios infrastructure has installed on Linux Centos servers & Microsoft WMI Proxy, & monitoring Micorsoft hosts also with NSCLient++

That still does not tell us what need to know, sreinhardt asked you for a link to where you got the plugin, you send us a list of *nix repos.