What Constitutes a "Logon Error" in Windows Server Wizard?
Posted: Wed Aug 01, 2018 2:13 pm
I'm using Nagios XI Version 5.5.1 and its Configuration Wizard for Windows Server.
I've installed the NSClient++ v0.4.4 on about 10 Windows servers (varying between 2008-2016) and part of my monitoring setup is using the premade Performance Counter "\\Server\\Errors Logon"
I've gotten critical status on all machines, as I've had anywhere from a few dozen to several hundred login errors reported since the last reboot. It seems very high considering all of the servers' uptimes are under a month, some just a few days.
I was hoping to see exactly what the NSClient was monitoring to check on this. I was not sure if it was Security Logs as I am not seeing as many Audit Failures as are reported.
I've installed the NSClient++ v0.4.4 on about 10 Windows servers (varying between 2008-2016) and part of my monitoring setup is using the premade Performance Counter "\\Server\\Errors Logon"
I've gotten critical status on all machines, as I've had anywhere from a few dozen to several hundred login errors reported since the last reboot. It seems very high considering all of the servers' uptimes are under a month, some just a few days.
I was hoping to see exactly what the NSClient was monitoring to check on this. I was not sure if it was Security Logs as I am not seeing as many Audit Failures as are reported.