nagios check_nrpe and Checkeventlog

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
Astroflo2016
Posts: 1
Joined: Mon Oct 24, 2016 4:39 am

nagios check_nrpe and Checkeventlog

Post by Astroflo2016 »

Hello

For a project I need to monitoring the GroupePolicy Event Log To monitoring with Nagios if all GPO are executed on the system.
however I have a question with Checkeventlog command when I execute :

Code: Select all

./check_nrpe -H 192.168.102.245 -p 5666  -c CheckEventLog -a[b] file='Microsoft-Windows-GroupPolicy/Opérationnel' [/b]MaxWarn=1 MaxCrit=1  "filter=generated gt -4d AND id  NOT IN ('7017') " truncate=1000 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"
In The Microsoft-Windows-GroupPolicy/Opérationnel I have an event in 7017 but the command CheclkEventLog doesn't see this Eventlog
with system or application files it's OK for other event but for Eventlog Concerned Group Policy does'nt see

could you help me to resolved my Issue ?
Thanks in Advence for your answer.

Best Regards.
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: nagios check_nrpe and Checkeventlog

Post by dwhitfield »

Are you running Core and Windows in the same language? Also, what version of NSClient++ are you running? Newer versions have better language support.

By no means am I sure this is the issue at this point, but I know we have seen weird things with logs when the languages don't match. In these cases in the past, setting the encoding parameter to utf8 has solved the problem.

Let us know if that helps. If not, we can dig a little deeper.
Locked