NagEventLog license

[tgfde]

Hello,

Where could I find the software license for NagEventLog? Also, would you recommend using this to monitor Windows 2008 Event log? I currently have 2014R1.1 installed.

Thank you!

[slansing]

You could use either that, a recent version of NSClient++, or WMI (http://exchange.nagios.org/directory/Pl ... us/details) / WMI wizard in XI.

NagEventLog is third party and can be found here:

http://exchange.nagios.org/directory/Ad ... og/details

The Windows Event Log wizard requires that client to be set up to use it.

[lmiltchev]

In addition to what slansing said - the NagEventLog is destributed under the GNU GPL license. For more info, you can contact the developer.
http://www.steveshipway.org/software/f_contact.html

[tgfde]

Thank you both!

If the latest version of NSClient++ will also work, how would I go about upgrading it? You mentioned recent version and I don't remember updating...

Thanks.

[tgfde]

Also, do you have documentation for event log monitoring with NSClient++?

Thanks.

[tgfde]

lmiltchev,

I followed your instruction below. However, how do I specify the event ID when using the command?

http://www.thedailyadmin.com/2010/08/ch ... .html#more

Thanks.

[slansing]

Do you mean hard coding it into the command? No, you can use $ARGn$ wherever you want the command to pick up arguments from your service definitions, almost all of the default XI commands have arguments integrated into them for the wizards, they provide good examples to look at.

[lmiltchev]

You can review the info on the NSClient++ web site, and play around with the examples there:

http://www.nsclient.org/nscp/wiki/Check ... #ideventid

Hope this helps.

[tgfde]

Hello,

If I use WMI to monitor windows event log, how would I monitor a particular event id instead of alerting me on all errors from the system log?

Do you have any documentation for the wmi wizard? Meaning, what values should be specified? For example, warning count, error count, and hours.

Thank you.

[slansing]

Well, nagios does not actively check the log, the updates are sent passively from what you define on that third party application, see:

http://assets.nagios.com/downloads/nagi ... entLog.pdf

You would need to make all of the configuration changes when it comes to warning/critical thresholds/etc, on that agent, on the remote host.