Nagios Support Forum

Is there any way I can monitor Windows servers (actually, any Windows OS host) for a pending reboot? We want to know when Windows hosts are pending reboots after patches and updates have been installed and are awaiting a reboot to complete the install.

Before anyone says to use PowerShell, I know there are plenty of scripts in PowerShell that I can run to get this info, but am I correct in assuming that I would need to use the Nagios client to do this? I'm trying to refrain from having to install the Nagios client because I have about 200 of these hosts that I want to monitor, and I really don't want to have to tap each host to install software and configure settings. We've been using WMI to monitor the Windows hosts, and we've had really good luck with this, as it involves nothing to install at the host end - just configuration at the Nagios server when adding the host to be monitored.

I saw a plugin that utilizes SNMP to convert event viewer to SNMP, but that looked like it would have a licensing cost per host? Is there any way to use WMI to monitor the Setup Event Log? I have the WMI setup with the Nagios Windows WMI hosts wizard that will monitor the Application and System event logs, but those look for event ID levels of critical, info, warning, etc. There doesn't appear to be a way to effectively monitor the Setup event log, as every event appears to be info level. All I would need is to be able to query the Setup event log for event ID 4, which shows that an update requires a reboot.

I did find this post/plugin that may meet your needs:

https://support.nagios.com/forum/viewto ... 30#p228530

If you have trouble accessing it, please let us know.

Oh hey... nifty! Any idea if this will work with the non-standard logs, other than application, system, security? I need to monitor the Setup log. I'll grab it and test. It will be good for some other tests, so it's not useless for me.

I managed to get this plugin installed and working, however, I'm not having much luck getting it to notify on anything found in the Setup log. It shows OK for everything I throw at it. I know it works for the standard Application, Security and System event logs, but I get nothing usable with Setup.

It's not working for me either, I'll have to look for another WMI query that will work.