Cheshire Cat Computing

This is normal; a passive service is never check by Nagios. Instead, when an eventlog message appears on the windows box, the nageventlog agent forwards it to Nagios immediately as a passive alert. If no message arrives, no alert is sent to Nagios.

Because of this, you may choose to use Freshness Checks to reset the servie status to OK, Critical or Unknown if an alert is not received for a specified period of time, depending on how you are using the agent.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11

Got it! Great software, many thanks.

I have created the heartbeat passive check as follows:

define service{
service_description EventLog Agent
host_name desktopname
active_checks_enabled 0
passive_checks_enabled 1
flap_detection_enabled 0
check_period 24x7
max_check_attempts 1
normal_check_interval 15
retry_check_interval 1
check_command check_dummy!3!Check agent is running
notification_interval 120
notification_period 24x7
notification_options c,r
}

This works for one desktop reports: HEARTBEAT [INFO #0]: Service running OK , the rest of them have been reporting pending for 3 days, also stating: Service is not scheduled to be checked...

Please help me out, I have no idea why this works for one desktop and not the others.

Thanks in advanced,

Joe

You should set the check_command to

check_command check_dummy!2!Eventlog agent is not running

and then enable the freshness checks for this service. Set the freshness threshold to double whatever you set at the heartbeatfrequency (normally, this would be 600 sec or 10min)

The freshness check causes the check_command to execute if nothing has been received for this amount of time, which sets the status to critical. Under normal conditions, an OK hearbeat is received every 5min so the freshness check never triggers.

From what you say it sounds like you are not receiving heartbeat signals from most of your hosts. Check the agent is running, heartbeats enabled, and nsca configured correctly.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11