How to monitor windows software raid (solution)

[Rene Fertig]

Anthony Montibello wrote:

> With that said, I recommend NC_Net (not only because I wrote it but also
> since it provides mechanism for retrieval using several of the methods
> hinted to in this thread.
>
> 1) using Windows Event log, there are several plugins that allow for
> checking windows event log (including NC_NEt)

I've done this.

I'm using Logparser 2.2 
(http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en) 
which parses the eventlog for some IDs, e.g.:

logparser "SELECT * FROM System where EventID IN(500;501;503;509;510)" -i:EVT 
-o:csv > "c:\Programme\Log Parser 2.2\output.csv"

One can use FIND to look if one of the IDs was found. I do this with the 
following batch/cmd file which is called itself by NRPE_NT (see 
Nagios-Exchange):

@ECHO OFF
"C:\Programme\Log Parser 2.2\logparser" "SELECT * FROM System where EventID 
IN(500;501;503;509;510)" -i:EVT -o:csv > d:\Logparser\output.csv
FIND "Elements output:    0" "C:\Programme\Log Parser 2.2\output.csv" > NUL
IF %ERRORLEVEL% GTR 0 (
  REM FIND "System," "C:\Programme\Log Parser 2.2\output.csv"
  echo Fehlermeldung im System-Eventlog gefunden
  exit 1
)
echo OK
exit 0

Probably using NC_Net is much smarter but I did it this way, since we already 
use NRPE_NT on this server.

Greetings, Rene

 
--
Tipps & Tricks für Linux, MySQL & Webdesign
  -> http://home.telebel.de/~referti/blog/

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null