<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> humm... I would not change it everywhere since I (personally) think it is a pretty rare "problem" unles you have an applicatikon which usualy logs very long messages. What you are saying is use a .5Mb memory on all my servers just because it "might be a long message" since very very long message (the message data is several K's in size) are not too common in the eventlog I would not change anything unless the error pops up. // Michael Medin Klaus Umbach skrev: <blockquote cite="mid:20090119111132.GC20304@umbach-racing.de" type="cite"> <pre wrap="">On 19/01/09 11:07, Michael Medin wrote: </pre> <blockquote type="cite"> <pre wrap="">It has nothing to do with language... The reason is that one of them has an entry which is "too long" so you need to update the buffer used when NSClinet++ reads the eventlog. The simplest way to solve this is to increase the buffer_size variable to something "large enough". If you check the wiki/forums on nsclient.org you can find some "values that worked for others" or you can play around and find what works for you. </pre> </blockquote> <pre wrap=""> Thanks! buffer_size=520000 worked. Now I have to change it everywhere... :-( - Klaus </pre> <blockquote type="cite"> <pre wrap="">// Michael Medin Klaus Umbach skrev: </pre> <blockquote type="cite"> <pre wrap="">Hi, I wonder why the following check works on a German Windows 2k3 server, but not on an English one. To me this makes no sense... NSC.ini is the same. CheckEventLog filter=new file=application MaxWarn=1 MaxCrit=1 filter+generated=<2h filter==eventID=888 Errormessage: "EventlogBuffer is too small (set the value of buffer_size): 122 The data area passed to a system call is too small." NSClient++ Version: 0.3.5.1 2008-09-24 (32bit) Maybe the language is just a coincidence... Cheers Klaus </pre> </blockquote> <pre wrap=""> </pre> </blockquote> <pre wrap=""> </pre> </blockquote> </body> </html>