Cheshire Cat Computing

Hi Steve,

Just wondering if I could get some assistance with your application, I have been pulling what little hair I have left out!

OS: Server 2012

I have set up the NSCA Daemon, created the event log passive checks using the wizard in Nagios XI, tested to make sure it works and it came back successful (although the status in EventLog Agent didn't change) created 4 filters (2 are the warning messages which match the Event ID, String and Source and the other 2 are the OK messages based on a different Event ID and String)

I have turned on debugging and it has a lot of information about skipping logs etc.. I've created a few test logs and still nothing gets sent to the server.

Debug logs: (Note that all of these events are in application)
Skipping filter DT Archiver (RTNS) Broken as it is for another log: [Application]!=[Security]
Skipping filter DT Archiver (MIZA) OK as it is for another log: [Application]!=[Security]
Skipping filter DT Archiver (MIZA) Broken as it is for another log: [Application]!=[Security]
Skipping filter DT Archiver (RTNS) OK as it is for another log: [Application]!=[Security]

It's pretty much flooding the event log with these messages.

Any ideas?

Cheers

Looks like your filters are set to be for a specific Eventlog, but the incoming messages are in a different eventlog, hence they do not match.

The debug logs are always put in Application. Your filters seem to be defined for the Security Eventlog only.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11