Events Log monitoing

[ranjitw]

Hi All,

Can you please guide me the way to monitor Events Log using NSClient++ ? We need to monitor below event ID's and alarm message should be like $source (Event ID: $event_id): $message.

Events "Events ID : 6008
Source : EventLog
Type : Error"

"Events ID : 333
Source : Application Popup
Type : Error"


"Events ID : 2020
Source : Srv
Type : Error"

"Events ID : 50
Source : Ftdisk
Type : Warning"

Please provide your valuable inputs.

Many thanks,
Regards,
Ranjit W

[MichielvM]

I did some eventlogging in the past using nagevlog.
Short for Nagios Event Log.
It's a program you run and configure on the host you wish to monitor.
You configure it to look for user-defined event-id's on specific logs. Nagevlog sends them to your Nagios server through nsclient.
Be advised: this is passive monitoring.

[ranjitw]

Hi MichielvM,

Thanks for sharing your inputs . I am looking for active monitoring solution .

I have explored on active monitoring and found below :

1) Need to set 1 for entries allow_nasty_meta_chars=1 and allow_arguments=1 in NSC.ini file .

2) Post setting I have restarted the NSClient++ .

I am facing problem in configuring the events in Nagios XI using the front end can you please advice on this ?

Regards,
Ranjit w

[MichielvM]

Assuming you want to monitor the eventlog for system malfunctions etc., why would you want active monitoring?
Depending on your check interval, this will only increase the load on your nagios server.

Passive monitoring is only active when an event occurs.

Regarding your question: Sorry, can't help you with it, as I only have experience with the passive method.

[Box293]

Honestly Nagios XI isn't really the best method for Event Log monitoring.

Nagios Log Server is a much better method.

It can alert on specific events, if x events occurred within a time frame.

Whats more appealing is that the events are stored on the Nagios Log Server, so if an Admin did something and then decided to clear the logs, the information still exists on the Nagios Log Server.

Here are some examples:
https://labs.nagios.com/2015/08/10/moni ... ver-final/

[MichielvM]

If you just need an occasional eventlog, it will do just fine.
When eventlogging is core business, I agree there's better tools than Nagios Xi.

[hsmith]

@ ranjitw, is there anything else we can do to assist you with this particular issue?

[ranjitw]

Hi,

Can you please suggest step by step configuration with one example to configure nagevlog ?

It would be of great help.

Many thanks,
Regards,
Ranjit W

[Box293]

Have you read this documentation before:

https://assets.nagios.com/downloads/nag ... entLog.pdf

[ranjitw]

Thanks , Please close the post.

Regards,
Ranjit W