Nagios Support Forum

Hi,

Been looking around on the interwebs and this is the command I found, but doesn't work
$USER1$/check_nrpe -H $HOSTNAME$ -p 5666 -c CheckEventLog -a filter=new file=application MinWarn=0 MinCrit=0 filter-generated=\>1d filter+eventID=="111" filter+eventType==error filter=out filter=all

I'm trying to to monitor application log for an event ID of 111 filtering on error. The error I'm getting in Nagios console is unknown command: checkeventlog

Please kindly advise.

If you are using NSClient, you better setup real-time eventlog monitoring..
Made a basic guide here:

http://outsideit.net/real-time-eventlog-monitoring/

Hope this helps. I never tried active eventlog checks, as the load is much higher for Nagios.

Grtz

Willem

Thank you, Willem. @jamesc23, let us know if this works out for you!

For the unknown command: checkeventlog issue check the nsclient.ini for the command.

find /i checkeventlog nsclient.ini

gormank wrote:For the unknown command: checkeventlog issue check the nsclient.ini for the command.

find /i checkeventlog nsclient.ini

Thank you for the help

Thanks all.

I've read through NSCA stuff and I believe I got all necessary steps ready. How do I create or use the command? I can see that I have a service template with check_dummy command.

Please advise.
Many thanks.

Somewhat older docs but the process hasn't changed much:

https://assets.nagios.com/downloads/nag ... ith_XI.pdf
https://assets.nagios.com/downloads/nag ... ith_XI.pdf

Basically, if you have NSCA set up properly they should show up in Unconfigured Objects under the Admin menu, and you can run a wizard from there to import them.

Forgive me as I'm very new at this still. I can see unconfigured objects but that's about it. I don't know the arguments to even try to make this work. That documentation doesn't explain how to setup the service to monitor the eventlog.

If they are in the Unconfigured Objects, you would click on them to import them into XI and that is how the service checks will be setup for you.

Sorry, but I need to put the obvious plug in here:

Get Nagios Log Server, send your Windows logs there, make a query in NLS to check for your issue, and then send alerts through Nagios or email from NLS.

There. Commercial over.