Page 1 of 1

Windows event log with nrpe

Posted: Sun Jul 09, 2017 11:50 pm
by gopinathnagios
Hi All,

Any one help me , to change last 24h in below syntax

Nsclient version : I (0.5.0.62 2016-09-14)

$USER1$/check_nrpe -H $HOSTADDRESS$ -c check_eventlog -a file="Application" "warning=count = 1" "critical=count = 3" "filter=source like 'Application Error' AND id = '1000'" unique truncate-message=300 'top-syntax=The status is: ${status}: with ${count} entries matching the ID the last 24h Log message:"${list}"'

Re: Windows event log with nrpe

Posted: Mon Jul 10, 2017 1:22 pm
by mcapra
Here's the docs for the NSClient++ CheckEventLog module:
https://docs.nsclient.org/reference/win ... kEventLog/

What exactly do you want to change it to? You should be able to make the status output whatever you like with the top-syntax argument. It's just for display purposes.

If you want to change the actual time frame in which the search happens, you should be able to use the scan-range argument. There's a sample usage on the above documentation page.

Re: Windows event log with nrpe

Posted: Mon Jul 10, 2017 1:59 pm
by tgriep
Thanks @mcapra for the help.
@gopinathnagios, let us know if you have any further questions in this issue.

Re: Windows event log with nrpe

Posted: Thu Jul 27, 2017 9:20 pm
by gopinathnagios
Thank you @mcapra and @tgriep......

I resolved with top-syntax and scan-range arguments .

Re: Windows event log with nrpe

Posted: Fri Jul 28, 2017 10:43 am
by tgriep
Thanks for reporting back. Shall I mark the post as solved and lock it?

Re: Windows event log with nrpe

Posted: Tue Aug 08, 2017 9:39 pm
by gopinathnagios
Yes, :) you can lock the post

Re: Windows event log with nrpe

Posted: Wed Aug 09, 2017 10:01 am
by bolson
Closing topic as resolved.

Thank you for using the Nagios Support Forum.