Page 1 of 1

Action based on Event Log monitoring

Posted: Mon Feb 07, 2022 4:12 am
by vishal313
Hi,

We have Nagios XI 5.8.5 in our environment. We are monitoring multiple Windows servers using NCPA.
I wanted to know if Nagios XI can take any action based on a match found for Event Log monitoring service.

Requirement : If certain Event ID is found with unique severity and text content, can Nagios XI take an action of rebooting the server.
If yes, then what privileges are needed or what should be the way of configuring it.


Regards
Vishal Dhote

Re: Action based on Event Log monitoring

Posted: Thu Feb 10, 2022 10:35 am
by gsmith
Hi

I used this to restart a Windows service if it failed, it's pretty terse, please take a look
and ask any questions you have:
restart Windows ncpalistener service from XI-pages.pdf
The one caveat I have is that it looks you can perform a shutdown using
"net rpc shutdown" but I don't see an option via "net rpc" for a reboot.
You may have to create a .bat or a .ps1 script on the Windows machine that calls
out a reboot.

Thanks