<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 11 (filtered medium)"> <style>  </style> </head> <body lang=NL link=blue vlink=purple> <div class=Section1> Hello everyone. Started testing Nagios since last February, and am very much please with the functionality. <o:p></o:p> I currently have a pilot Nagios implementation, monitoring about 100 Windows 2003 servers. I have one WinXP client, installed with a NSClient++ agent. All checks are executed remotely from the WinXP workstation, which acts as a proxy. My servers are agentless. <o:p></o:p> Now I have created a vbs script to collect entries from the Windows eventlog, alerting on filtered errors, warning, eventsource, eventide, etc. For each defined filter I create one Service in Nagios (eg. I have one service checking for Antivirus events, another service checking for Printserver events, one service checking for DNS events, etc.)<o:p></o:p> Each run of the script could report on multiple events. At the moment the script creates one single alert, showing multiple events. <o:p></o:p> However, I would like to <o:p></o:p> <ol style='margin-top:0cm' start=1 type=A> <li class=MsoNormal style='mso-list:l0 level1 lfo1'>have one alert generated for each unique event (in order to use the notification mechanism). If possible I would like to implement an event-database, where I would be able to handle each unique alert. Something similar to MOM, where a count of each unique event is displayed, and as long as the event is not yet closed no new notifications are being sent out. <o:p></o:p></li> <li class=MsoNormal style='mso-list:l0 level1 lfo1'>In the end, I would like to implement some module, that will create a ticket in our Ultimo helpdesk system, for each new alert generated. <o:p></o:p></li> </ol> Is this feasible with a combination of NSCA and Nagios Eventdb ? I have not yet been able to get the Eventdb running properly yet, so at the moment I am unable to assess the value of this tool. Also with NSCA I have just started playing. However, after some time I started getting NTVDM errors, which would only resolve with a reboot from my proxy.Th built-in NSCA functionality in the NSClient++ will only allow me (or so it seems) to run one instance of every defined script at a regular interval.<o:p></o:p> Has anyone implemented something similar yet, and how did you get everything up and running ? <o:p></o:p> <o:p> </o:p> Thanks in advance for feedback,<o:p></o:p> Mike<o:p></o:p> <o:p> </o:p> </div> </body> </html>