<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META content="text/html; charset=us-ascii" http-equiv=Content-Type> <META name=GENERATOR content="MSHTML 8.00.6001.18876"></HEAD> <BODY> <DIV>I was asked to see if we can capture and alert on a event that happens often on one of out NT servers. Below is the event:</DIV> <DIV> </DIV> <DIV> <DIV class=Section1> Ed,<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p> As we just discussed, here is paste of the exact text of the Warning from the Application Event Log and a screenshot with all the details for the message that is generated every 60 seconds when the servers have a problem negotiating a connection. As this has become a reoccurring problem, Paul has asked that we monitor this and send out alerts so we can jump on it next time it happens. Please call me with any questions. Thanks<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> Server Name: PBX003<o:p></o:p> Application Log <o:p></o:p> <o:p> </o:p> EmailManager EventCode:25000 Level:2 Email - An exception was caught trying to connect to host : exchange.americanmedicalassociation.org, Inbox: Ama_nt\hppcmail, javax.mail.MessagingException: Connect failed; nested exception is:avax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake<o:p></o:p> <o:p> </o:p> <IMG id=_x0000_i1025 src="outbind://37-000000003F030AE079B74547A874BA875700A0E30700E88AC4FC35C50440A74490903FE7EE590000000901F80000E88AC4FC35C50440A74490903FE7EE5900001608F43F0000/cid:image001.jpg@01CBED3F.3C8039B0" width=1280 height=770><o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p>What I did was to download and have the NT folks invoke the event_agent.exe file Then from my Nagios host side (Linux), execute the check_win_eventlog.pl script, and fill in the parameters that I think are correct. When I execute the script from the Nagios server side to test, it just seems to hang and the NT admins sent me the screen below.</o:p> <o:p>I am not a Windows person so I am not sure that I am testing this correct. So what I am asking if someone with more knowledge of what I am trying to accomplish could help me out. Here is what I am running for the Server side:</o:p><o:p> ../../libexec/check_win_eventlog.pl -H 10.0.94.22 -l 'Application' -s 'EmailManager' -m '*:+Connect failed' -t Warning And below is what the Windows people are seeing on there side. </o:p>This was in dos window b4 I closed it out. We can do it again Mon.</DIV></DIV> <DIV> </DIV> <DIV><IMG src="cid:244580813@05042011-322C"></DIV> <DIV> </DIV> <DIV> </DIV> <DIV> </DIV> <DIV>Any help or guidance would be greatly appreciated.</DIV> <DIV> </DIV> <DIV>Thanks again,</DIV> <DIV> </DIV> <DIV>Ed Zoeller</DIV> <DIV align=left> P Please consider the environment before printing this e-mail<o:p></o:p></DIV> <DIV> </DIV></BODY></HTML>