Page 1 of 1

CheckEventLog problem

Posted: Thu Nov 26, 2015 3:39 am
by oko12
Hello All
I have one problem after apgradenagios to 4.1.1
In nagios.debug I can find this:
Done. Final output: '/usr/local/nagios/libexec/check_nrpe -H 10.100.100.33 -c CheckEventLog -a file=system MaxWarn=3 MaxCrit=30 "filter=generated gt -1d AND severity NOT IN ('success', 'informational','warning')" truncate=800 unique descriptions "syntax=%generated%: %severity%: %source%: %id%: %message% (%count%)"'
When I use it in cli from user nagios I get:

[root@centos1 ~]# /usr/local/nagios/libexec/check_nrpe -H 10.100.100.33 -c CheckEventLog -a file=system MaxWarn=3 MaxCrit=30 "filter=generated gt -1d AND severity NOT IN ('success', 'informational','warning')" truncate=800 unique descriptions "syntax=%generated%: %severity%: %source%: %id%: %message% (%count%)"
Wednesday, November 25, 2015 16:23:16: error: volsnap: 36: Wykonywanie kopii w tle woluminu C: zosta▒o przerwane, poniewa▒ nie mo▒na powi▒kszy▒ magazynu kopii w tle z powodu limitu wprowadzonego przez u▒ytkownika. (1), Wednesday, November 25, 2015 09:53:29: error: SNMP: 1500: The SNMP Service encountered an error while accessing the registry key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration. (2), eventlog: 3 > warning|'eventlog'=3;3;30
[root@centos1 ~]#

But in nagios web services i have this service yellow and it is in state warning, but status information field is empty, what can be wrong ?

Re: CheckEventLog problem

Posted: Sun Nov 29, 2015 11:01 pm
by Box293
What language is your Nagios Core server running?

Re: CheckEventLog problem

Posted: Mon Nov 30, 2015 6:12 am
by mickem
Not sure about 0.4.1 but you can set encoding in modern NSClient++: https://docs.nsclient.org/reference/cli ... r.encoding

Re: CheckEventLog problem

Posted: Mon Nov 30, 2015 11:00 am
by oko12
Hello
Tahnk You a lot for Your sugestions, upgradeing nsclient to version 0.5 and put encoding parameter to utf8 solved the problem.

Re: CheckEventLog problem

Posted: Mon Nov 30, 2015 11:35 am
by hsmith
@mickem , thanks for the help :)

@oko12, are we good to close this thread?