Nagios Support Forum

Here is the command and output.

nagios01@nagios01:~$ /usr/local/nagios/libexec/check_nt -H 192.168.39.40 -p 12489 -v PROCSTATE -d SHOWALL -l explorer.exe
explorer.exe: not running

@mhedtcke, Can you open the Windows Task Manager on the 92.168.39.40 server and take a screenshot of the processes tab so that we can see the explorer.exe? I wonder if the process is called differently on your system, maybe like explorer64.exe?

Your comment about case triggered an idea for me. "Explorer.exe" in the windows config file was uppercase and "explorer.exe" is lowercase on my server. I changed the windows.cfg file to match with it being lower case but it still alerts even with the case matching in the updated config file.

@mhedtcke, If you run it like this:
/usr/local/nagios/libexec/check_nt -H 192.168.39.40 -p 12489 -v PROCSTATE -d SHOWALL -l explorer.exe
The command doesn't play a role since we're running it manually.

Can you check to see if nrpe command will work for you? What version of the NSClient do you have? Can you send me your nsclient.ini file via personal message so I could review it?
After you send it please post something in this thread to bring it back up in the support queue.

I dont have the plugin for Check_nrpe so the command doesn't run. I will send you the ini file.

I am also using the latest NSClient. Just installed it the other day.

mhedtcke wrote:I dont have the plugin for Check_nrpe so the command doesn't run. I will send you the ini file.

It is built in to NSClient++ if you enable NRPE and CheckSystem
https://docs.nsclient.org/reference/win ... eckSystem/

You do need port 5666 open and your IP in allowed_hosts in the nscp.ini

I checked the rest of my servers and none of them are monitoring the explorer process so I just commented out that from the config file. Thanks for try this with me.

Hi, @mhedtcke. I recieved you NSCLient.ini file and made some changes to it. I sent it back to you via PM.
Please replace your nsclient.ini file, restart the nsclient service and try:

1) The original command one more time:
/usr/local/nagios/libexec/check_nt -H 192.168.39.40 -p 12489 -v PROCSTATE -d SHOWALL -l explorer.exe

2) The check_nrpe command:
./check_nrpe -H 192.168.39.40 -c check_process -a process=explorer.exe show-all