Windows Event Log
Edwin Zoeller
Edwin.Zoeller at ama-assn.org
Tue Apr 5 15:26:07 CEST 2011
I was asked to see if we can capture and alert on a event that happens
often on one of out NT servers. Below is the event:
Ed,
As we just discussed, here is paste of the exact text of the
Warning from the Application Event Log and a screenshot with all the
details for the message that is generated every 60 seconds when the
servers have a problem negotiating a connection. As this has become a
reoccurring problem, Paul has asked that we monitor this and send out
alerts so we can jump on it next time it happens. Please call me with
any questions. Thanks
Server Name: PBX003
Application Log
EmailManager EventCode:25000 Level:2 Email - An exception was caught
trying to connect to host : exchange.americanmedicalassociation.org,
Inbox: Ama_nt\hppcmail, javax.mail.MessagingException: Connect failed;
nested exception is:avax.net.ssl.SSLHandshakeException: Remote host
closed connection during handshake
<outbind://37-000000003F030AE079B74547A874BA875700A0E30700E88AC4FC35C504
40A74490903FE7EE590000000901F80000E88AC4FC35C50440A74490903FE7EE59000016
08F43F0000/cid:image001.jpg at 01CBED3F.3C8039B0>
What I did was to download and have the NT folks invoke the
event_agent.exe file Then from my Nagios host side (Linux), execute the
check_win_eventlog.pl script, and fill in the parameters that I think
are correct. When I execute the script from the Nagios server side to
test, it just seems to hang and the NT admins sent me the screen below.
I am not a Windows person so I am not sure that I am testing this
correct. So what I am asking if someone with more knowledge of what I am
trying to accomplish could help me out. Here is what I am running for
the Server side:
../../libexec/check_win_eventlog.pl -H 10.0.94.22 -l 'Application' -s
'EmailManager' -m '*:+Connect failed' -t Warning
And below is what the Windows people are seeing on there side.
This was in dos window b4 I closed it out. We can do it again Mon.
Any help or guidance would be greatly appreciated.
Thanks again,
Ed Zoeller
P Please consider the environment before printing this e-mail
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20110405/14ed7c9a/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook.jpg
Type: image/jpeg
Size: 21694 bytes
Desc: Outlook.jpg
URL: <https://www.monitoring-lists.org/archive/users/attachments/20110405/14ed7c9a/attachment.jpg>
-------------- next part --------------
------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
More information about the Users
mailing list