Page 1 of 1

windows file log monitoring

Posted: Wed Sep 07, 2011 8:05 am
by jarek
hi, I need to monitor textlog file on windows. I have found loads of linux parsers, but nothing for windows. can someone advice me some useful...? actually Im using some passive checks thru nscaclient++, but it can be used just for eventlog.

Re: windows file log monitoring

Posted: Wed Sep 07, 2011 9:43 am
by mguthrie
Look for "NagEventLog" on exchange.nagios.org. That will probably get you what you need.

Re: windows file log monitoring

Posted: Thu Sep 08, 2011 2:28 am
by jarek
definitely not. I have stated before, that I do NOT want monitor eventlog, but text log file.

Re: windows file log monitoring

Posted: Fri Sep 09, 2011 3:10 am
by aracon123
Thank you for the info here.

Re: windows file log monitoring

Posted: Fri Sep 09, 2011 1:58 pm
by mrb
How about creating a batch file to parse the log?
http://www.computing.net/answers/progra ... 16018.html

Re: windows file log monitoring

Posted: Wed Sep 14, 2011 10:26 am
by jamfuse
Hi Jarek,

I have done something in this area, there are a few steps involved but it gives create flexibility for parsing and changing the parsing of the logs. Basically I
- shared the log folder as read only
- created a user to read it and stored the credentials in a hidden file on the Nagios server (Ubuntu Server)
- mounted the drive
- wrote a simple bash script which can check the on-disk size and actual size (the log file was on NTFS compressed drive) and grep for certain words.

This means that if there are new types of log files (they're from an in-house app) or different data to grep for I just need to change the bash script. Once you have a basic framework for your script which takes variable in the top and outputs the result, exit code and performance data in the correct format at the bottom you can always use it again for a different script. (Why is why I think Nagios is great.)


Cheers,
Jamie

Re: windows file log monitoring

Posted: Fri Sep 16, 2011 1:54 am
by jarek
thanks, it could be usefull... but, I need passive check. monitored server is not available for nagios.