Nagios Support Forum

Hi,
I am trialing out Nagios XI and wish to use NSCA to monitor windows eventlog from remote computers. I noticed that NSCA is already installed with Nagios XI, and have followed the documentation to configure NSCA to accept information from remote computers, but I am having 2 issues:

1. I have set the port on my router to forward 5667 to my nagios XI, but its seems that it still blocked. I have nagiosmobile installed and its running fine, so I dont know what I missed.

2. I also have issues installing the NSCA agent on remote computers. It keeps coming up with:
Runtime error!
Program C:Windows\SysWOW64\regsvr32.exe
R6034
An application has made an attempt to load the C runtime library incorrectly.
please contact the application's support team for more information.
After clicking the error messages 4 times, the installation finishes and says its running. But when i quit and reopen the agent, it says service is not running. the remote computer is running windows 7, but even with windows server 2003, it gave me the same error as well.

Any pointers? Thanks.

Can you run the following on the XI server and report the output also

Hi Scott,
iptables -L command gives me this output:
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

and cat /etc/xinetd.d/nsca|grep only_from gives me nothing, I suppose its because i deleted the line only_from in that nsca file.

Thank you for your reply.

Are you by chance using the NagEventLogMonitor application? Or is this during the install of NSClient++, there seems to be a bit of confusion over the terminology here. The EventLogMonitor has this issue and as of yet the third party developer has not implemented a fix, in most cases it does still function fine after clicking though the errors.

Take a read through of this document:

http://assets.nagios.com/downloads/nagi ... entLog.pdf

Hi,
I downloaded the agent that was mentioned in the nagiosxi documentation, the agent file name is nagevlog-setup-1.9.2.exe, so I think thats NagEventLog. I also use NSClient++ for testing NRPE and thats working fine.

During installaton of NagEventLog, I did click through the errors, about 4 times, all were the same error messages, and once finished it run the application and saying service is running. If thats what it is, then its ok, but I still cant connect to my nagiosxi.

The Nageventlog is installed on a remote server, I have opened the port 5667 in my router and forwarded to my nagiosxi, also setup the same password and encryption method but it still wont connect.

Did you make sure to restart the service manually after changing passwords and encryption methods? When running the wizard on the XI side make absolutely sure that the service names are the exact same as the filters you set in the Event Log Monitor. If they are not they will just bounce off. Also, can you tail the syslog to see if you are getting hit by the Event Log Monitor?

Hi Guys,
It seems its working now, turns out the port is not automatically enabled in the nagios xi somehow, so after manually using iptables command to enable the incoming port, nagios xi starts receiving the log.

Thanks for all the replies.