Nagios Support Forum

Posted: **Mon Oct 24, 2016 6:10 am**

Hello

For a project I need to monitoring the GroupePolicy Event Log To monitoring with Nagios if all GPO are executed on the system.
however I have a question with Checkeventlog command when I execute :

Code: Select all

./check_nrpe -H 192.168.102.245 -p 5666  -c CheckEventLog -a[b] file='Microsoft-Windows-GroupPolicy/Opérationnel' [/b]MaxWarn=1 MaxCrit=1  "filter=generated gt -4d AND id  NOT IN ('7017') " truncate=1000 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"

In The Microsoft-Windows-GroupPolicy/Opérationnel I have an event in 7017 but the command CheclkEventLog doesn't see this Eventlog
with system or application files it's OK for other event but for Eventlog Concerned Group Policy does'nt see

could you help me to resolved my Issue ?
Thanks in Advence for your answer.

Best Regards.

Posted: **Mon Oct 24, 2016 1:30 pm**

Are you running Core and Windows in the same language? Also, what version of NSClient++ are you running? Newer versions have better language support.

By no means am I sure this is the issue at this point, but I know we have seen weird things with logs when the languages don't match. In these cases in the past, setting the encoding parameter to utf8 has solved the problem.

Let us know if that helps. If not, we can dig a little deeper.

Nagios Support Forum

nagios check_nrpe and Checkeventlog

nagios check_nrpe and Checkeventlog

Re: nagios check_nrpe and Checkeventlog