Action based on Event Log monitoring

[vishal313]

Hi,

We have Nagios XI 5.8.5 in our environment. We are monitoring multiple Windows servers using NCPA.
I wanted to know if Nagios XI can take any action based on a match found for Event Log monitoring service.

Requirement : If certain Event ID is found with unique severity and text content, can Nagios XI take an action of rebooting the server.
If yes, then what privileges are needed or what should be the way of configuring it.


Regards
Vishal Dhote

[gsmith]

Hi

I used this to restart a Windows service if it failed, it's pretty terse, please take a look
and ask any questions you have:

restart Windows ncpalistener service from XI-pages.pdf

The one caveat I have is that it looks you can perform a shutdown using
"net rpc shutdown" but I don't see an option via "net rpc" for a reboot.
You may have to create a .bat or a .ps1 script on the Windows machine that calls
out a reboot.

Thanks