Page 1 of 1

checkeventlog Windows EventViwer

Posted: Sun Jul 26, 2020 11:00 am
by FCC_Nagios_Support
Hi,

I gotta problem reading giants event viwer Windows System.
The plugin answer with a timeout sometimes reading some Windows System EventViwer.
The solution is backup Eventviwer and clear System records.
The command is:
/usr/local/nagios/libexec/check_nrpe -H a2aqsql004d -t 270 -c checkeventlog -a file=System ... "filter=generated gt -1h .."
Are there any other solution?

Thanks in advance.
KR

Re: checkeventlog Windows EventViwer

Posted: Mon Jul 27, 2020 12:46 pm
by ssax
You will need to adjust the timeout in your nsclient.ini as well:

Code: Select all

[/settings/NRPE/server]
timeout = 300
Then restart the nsclient++ service.


You can also edit the event log settings by right clicking on it in the event viewer to adjust what happens when it reaches the maximum size.


Are you checking every five minutes or every hour? If you service is checking every five minutes you can change this:

Code: Select all

filter=generated gt -1h
To this:

Code: Select all

filter=generated gt -5m
That will reduce the amount of data it needs to parse.