check_nt EventLog regex
Anthony Montibello
amontibello at gmail.com
Tue Dec 18 00:52:32 CET 2007
Take out the extra quotes and try it again
"Application, error,1440,1,"Backup exec",0,0"
"Application, error,1440,1,Backup exec,0,0"
Since it is Comma delimited it does not need the extra quotes
Also please use EVENTLOG_NEW if posible since it is more efficient.
However it uses a slightly different syntex
Tony (Author of NC_NEt)
On Dec 17, 2007 5:55 AM, Ronan REYNAUD <R.REYNAUD at omr.fr> wrote:
> Hi
>
> I've set Nc_Net on a 2003server, and I can read the Application Log
> From my nagios-server :
> ./check_nt -H 192.168.x.X -s "None" -v EVENTLOG -w 1 -c 2 -l
> "Application, error,1440,0,0,0"
>
> .. and I get my results, every errors within 1440 mn. OK.
>
>
> I want only some errors based on the Event Source (ie WINSCTRS or
> Backup Exec ), and I tried to use the filter :
> ./check_nt -H 192.168.x.X -s "None" -v EVENTLOG -w 1 -c 2 -l
> "Application, error,1440,1,"Backup exec",0,0"
>
> .. then I get "no error" (But I know there are errors)
>
> I guess I should use some regexp, but can't figure how to write them.
> (I tried many search in the documentation and on the web, with no luck)
>
> Any clue, please ?
>
> Thanks
>
> Ronan
>
> -------------------------------------------------------------------------
> SF.Net email is sponsored by:
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services
> for just about anything Open Source.
>
> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20071217/2b83de9c/attachment.html>
-------------- next part --------------
-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
More information about the Users
mailing list