checkeventlog Windows EventViwer

[FCC_Nagios_Support]

Hi,

I gotta problem reading giants event viwer Windows System.
The plugin answer with a timeout sometimes reading some Windows System EventViwer.
The solution is backup Eventviwer and clear System records.
The command is:
/usr/local/nagios/libexec/check_nrpe -H a2aqsql004d -t 270 -c checkeventlog -a file=System ... "filter=generated gt -1h .."
Are there any other solution?

Thanks in advance.
KR

[ssax]

You will need to adjust the timeout in your nsclient.ini as well:

Code: Select all

[/settings/NRPE/server]
timeout = 300

Then restart the nsclient++ service.


You can also edit the event log settings by right clicking on it in the event viewer to adjust what happens when it reaches the maximum size.


Are you checking every five minutes or every hour? If you service is checking every five minutes you can change this:

Code: Select all

filter=generated gt -1h

To this:

Code: Select all

filter=generated gt -5m

That will reduce the amount of data it needs to parse.