NSClient++ - 0.4.3.131 real time event log filter syntax

[michaelli]

Hi all,
Anyone have information for how to write real time event log filter syntax or example for NSClient++ - 0.4.3.131?

The following example are confirmed not work in Nsclient 0.4.3.131
filter= level = (warning) AND ID NOT IN (1,2,3,100)
filter= level = (warning,error) AND ID NOT IN (1,3,30,1000)
filter= level = (warning)
filter= level = (error)
fitler= level = "warning"
fitler= level = "error"
fitler= level = 'warning'
fitler= level = 'error'

[Box293]

Does this example help?

http://support.nagios.com/forum/viewtop ... 39#p129098

[michaelli]

Hi Box293,

Actually I need the syntax for create the filter messages. Below is the valid syntax which I use "try and error" method to find it out.

This filter can filter out "error" and "warning" with ignore ID for nsclient ver 0.4.3.131
filter=level IN (1,2) AND (id NOT IN (2,3))

Remark
level 1 =error
level 2 =warning

Thank you for helping me solving many nagios problems.

[jdalrymple]

Sounds like you have this issue sorted out michaelli?

Or should I leave the thread unlocked for further correspondence? If we should leave it open can you clarify any further questions you might have with this?

[michaelli]

Hi jdalrymple,
pls help to closed this case