IIS Log Monitoring

[markf]

Hello,

I would like to be able to scan the contents of the daily IIS W3C web server log file on a Windows server using nsclient++. I would like the output to produce the number of connections from a specific IP address (or login) and warn if there are say 100 connections or attempts in the past 5 minutes. Is this possible using Nagios core and the nsclient++. I have checked the Nagios Exchange but not finding a plugin to do this.

Any suggestions would be appreciated.

Thanks

[jolson]

This sounds like a prime opportunity to recommend Nagios Log Server- it is capable of doing exactly what you're asking. In addition to alerting based on connections, Nagios Log Server could produce graphs based on the other parts of the IIS log - a response time graph, for instance. I worked with a client the other day who is doing exactly this.

If Log Server isn't an option, I think that we could work with NSClient. Have you looked at http://docs.nsclient.org/reference/CheckLogFile.html? If so, how far have you gotten?