Cheshire Cat Computing

Hi

i have Problems with the Eventlog Agent and my nagios V2.

I hve installed the agent on a W2003 Server and configured my nagios with nsca. All works fine.
On my nagios box i can see the events received from the eventlog agent via nsca.

Sep 30 06:07:11 c-500534 nsca[11662]: Handling the connection...
Sep 30 06:07:11 c-500534 nsca[11662]: SERVICE CHECK -> Host Name: 'WG-W11', Serv
ice Description: 'Application EventLog', Return Code: '2', Output: 'Application
[error] [netbackup volume manager #2064]: media ID 000030 has expired '
Sep 30 06:07:11 c-500534 nsca[11662]: End of connection...
Sep 30 06:07:11 c-500534 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;
WG-W11;Application EventLog;2;Application [error] [netbackup volume manager #206
4]: media ID 000030 has expired
Sep 30 06:07:33 c-500534 nsca[11730]: Handling the connection...
Sep 30 06:07:34 c-500534 nsca[11730]: SERVICE CHECK -> Host Name: 'WG-W11', Serv
ice Description: 'Application EventLog', Return Code: '2', Output: 'Application
[error] [netbackup volume manager #2064]: media ID 000030 has expired '
Sep 30 06:07:34 c-500534 nsca[11730]: End of connection...
Sep 30 06:07:34 c-500534 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;
WG-W11;Application EventLog;2;Application [error] [netbackup volume manager #206
4]: media ID 000030 has expired


After 10 minutes i can see the message:

Sep 30 06:17:11 c-500534 nagios: Warning: The results of service 'System EventLo
g' on host 'wg-w11' are stale by 60 seconds (threshold=1500 seconds). I'm forci
ng an immediate check of the service.


But i cannot see this event at the nagios GUI as alarm.


service.cfg

define service{
use generic-service
service_description Application
active_checks_enabled 0
passive_checks_enabled 1
flap_detection_enabled 0
register 0
is_volatile 0
check_period 24x7
max_check_attempts 1
normal_check_interval 5
retry_check_interval 1
check_freshness 1
freshness_threshold 1500
contact_groups nt-admins
notification_interval 120
notification_period 24x7
notification_options w,u,c,r
stalking_options w,c,u
name Application
register 0
}

define service{
use Application
service_description System EventLog
host_name wg-w11
check_command check_dummy!0
}

checkcommands.cfg

define command{
command_name check_dummy
command_line $USER1$/check_dummy $ARG1$
}


What is wrong?
Please help!

Thanks


Bernd

You have configures the Eventlog agent to send alerts to a service named 'Application Eventlog'.

However, you have only defined services called 'Application' and 'System EventLog'. Therefore, Nagios is ignoring the message when NSCA receives it.

You need to define a service called 'Application EventLog', inheriting from the 'Application' definition, and all will work.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11

Thanks for help

it works!