Page 1 of 1

Better way to monitor logon errors

Posted: Fri Apr 06, 2012 11:43 am
by AWS
CentOS 5.7 (final)
32bit
2011R2.2
Manual Install of XI
Gnome installed but never used
Are you using a proxy - transparent
Are you using SSL: No

I'm monitoring a performance counter on a Windows server: \Server\Errors Logon
and it's working just fine. However, the behavior is not what I would like. I have no way to reset this counter unless I reboot the server, which, just isn't going to happen. So the counter keeps rising and rising. As a temp, I have set the "MaxWarn" and "MaxCrit" to ridiculously high values but that nullifies the use of this monitor.

Is it possible to have Nagios notify me on a change of this value (when it's incremented) as opposed to having a min/max threshold? I don't care what the cumulative total is. Then to put this monitor in a "Warning" state until I acknowledge?

Current monitoring values:

Code: Select all

Check command: check_nrpe
$ARG1$: CheckCounter
$ARG2$: -a "Counter:Logon Errors=\\Server\\Errors Logon" ShowAll MaxWarn=999 MaxCrit=9999
Thanks

Re: Better way to monitor logon errors

Posted: Fri Apr 06, 2012 11:57 am
by scottwilkerson
I would use NagEventLog for this type of item
http://exchange.nagios.org/directory/Ad ... og/details