Page 1 of 1

NSClient++ - 0.4.3.131 real time event log filter syntax

Posted: Sat Mar 07, 2015 1:25 am
by michaelli
Hi all,
Anyone have information for how to write real time event log filter syntax or example for NSClient++ - 0.4.3.131?

The following example are confirmed not work in Nsclient 0.4.3.131
filter= level = (warning) AND ID NOT IN (1,2,3,100)
filter= level = (warning,error) AND ID NOT IN (1,3,30,1000)
filter= level = (warning)
filter= level = (error)
fitler= level = "warning"
fitler= level = "error"
fitler= level = 'warning'
fitler= level = 'error'

Re: NSClient++ - 0.4.3.131 real time event log filter syntax

Posted: Sat Mar 07, 2015 7:01 pm
by Box293

Re: NSClient++ - 0.4.3.131 real time event log filter syntax

Posted: Tue Mar 10, 2015 10:27 pm
by michaelli
Hi Box293,

Actually I need the syntax for create the filter messages. Below is the valid syntax which I use "try and error" method to find it out.

This filter can filter out "error" and "warning" with ignore ID for nsclient ver 0.4.3.131
filter=level IN (1,2) AND (id NOT IN (2,3))

Remark
level 1 =error
level 2 =warning

Thank you for helping me solving many nagios problems.

Re: NSClient++ - 0.4.3.131 real time event log filter syntax

Posted: Wed Mar 11, 2015 12:16 pm
by jdalrymple
Sounds like you have this issue sorted out michaelli?

Or should I leave the thread unlocked for further correspondence? If we should leave it open can you clarify any further questions you might have with this?

Re: NSClient++ - 0.4.3.131 real time event log filter syntax

Posted: Thu Mar 12, 2015 8:45 pm
by michaelli
Hi jdalrymple,
pls help to closed this case