{"action":"created","issue":{"url":"https://api.github.com/repos/mickem/nscp/issues/32","labels_url":"https://api.github.com/repos/mickem/nscp/issues/32/labels{/name}","comments_url":"https://api.github.com/repos/mickem/nscp/issues/32/comments","events_url":"https://api.github.com/repos/mickem/nscp/issues/32/events","html_url":"https://github.com/mickem/nscp/issues/32","id":42516799,"number":32,"title":"check_eventlog - not like ","user":{"login":"gitpumawit","id":8735861,"avatar_url":"https://avatars.githubusercontent.com/u/8735861?v=3","gravatar_id":"","url":"https://api.github.com/users/gitpumawit","html_url":"https://github.com/gitpumawit","followers_url":"https://api.github.com/users/gitpumawit/followers","following_url":"https://api.github.com/users/gitpumawit/following{/other_user}","gists_url":"https://api.github.com/users/gitpumawit/gists{/gist_id}","starred_url":"https://api.github.com/users/gitpumawit/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gitpumawit/subscriptions","organizations_url":"https://api.github.com/users/gitpumawit/orgs","repos_url":"https://api.github.com/users/gitpumawit/repos","events_url":"https://api.github.com/users/gitpumawit/events{/privacy}","received_events_url":"https://api.github.com/users/gitpumawit/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2014-09-11T12:10:07Z","updated_at":"2015-01-05T22:21:53Z","closed_at":"2015-01-05T20:16:10Z","body":"\r\nHi All\r\n\r\nWe use check_eventlog, and now we have a problem with the syntax. We don't know what all of failures it can be\r\n\r\nNSClient++ 0.4.1.102 - 64bit\r\n\r\nThis is the Syntax it goes:\r\nmessage like 'HH6' \r\nmessage not like 'HH6' \r\n\r\n\r\n<br>\r\n\r\nThis is the positiv check to grep the current failure that we want exclude\r\n```bash\r\n./check_nrpe -H HOST -c CheckEventLog -a file=application MaxWarn=2 MaxCrit=2 \"filter=source like 'TCLKD' AND type IN ('error') AND message like 'HH6' AND generated > -1h\" truncate=800 unique descriptions \"syntax=%id%: %message% (%count%)\"\r\n```\r\n\r\n\r\nResult: The ckeck found the error with paramenter \"like 'HH6'\"\r\n```\r\n15001: RFC Server can't register at gateway, RFC function: RfcAccept RFC error string\r\n KEY=RFC_IO5 STATUS=CODE=CM_PRODUCT_SPECIFIC_ERROR STATUS=??? DATA=??? \r\nID=??? MESSAGE=Connect to DAT gateway failed Connect_PM  TPNAME=WHPC-XI9s.TPHA.HH6, \r\nGWHOST=isla919, GWSERV=7707  LOCATION    CPIC (TCP/IP) on local host ERROR       partner \r\n'172.32.14.9:7707' not reached TIME        Thu Sep 11 10:27:07 Especially check lines \r\nGWHOST= and GAWSERV= . (1)|'eventlog'=1;2;2directory).\r\n```\r\n\r\n<br><br>\r\n\r\nThis is the negativ check to exclude the HH6 message\r\n```bash\r\n./check_nrpe -H HOST -c CheckEventLog -a file=application MaxWarn=2 MaxCrit=2 \"filter=source like 'TCLKD' AND type IN ('error') AND message not like 'HH6' AND generated > -1h\" truncate=800 unique descriptions \"syntax=%id%: %message% (%count%)\"\r\n```\r\n\r\n\r\n\r\n\r\nVerry strange output:\r\n\r\n```\r\nsettings. Check trace output. Check user acount se...|'eventlog'=3;2;2of wrong  from the  start.initializing mail DLL\"\r\n```\r\n\r\n<br><br>\r\n\r\n\r\nThis is the check with a \"not like Text-that-is-not-EXIST\" to check if the plugin works\r\n```bash\r\n./check_nrpe -H HOST -c CheckEventLog -a file=application MaxWarn=2 MaxCrit=2 \"filter=source like 'TCLKD' AND type IN ('error') AND message not like 'Text-that-is-not-EXIST' AND generated > -1h\" truncate=800 unique descriptions \"syntax=%id%: %message% (%count%)\"\r\n```\r\n\r\nAnd verry good, it works, it show's me only the HH6, failure because there is no \"Text-that-is-not-Exist\" Error on the Event Log.\r\n```\r\n15001: RFC Server can't register at gateway, RFC function: RfcAccept RFC error string\r\nKEY=RFC_IO5 STATUS=CODE=CM_PRODUCT_SPECIFIC_ERROR STATUS=??? DATA=???\r\nID=??? MESSAGE=Connect to DAT gateway failed Connect_PM  TPNAME=WHPC-XI9s.TPHA.HH6,\r\nGWHOST=isla919, GWSERV=7707  LOCATION    CPIC (TCP/IP) on local host ERROR       partner\r\n'172.32.14.9:7707' not reached TIME        Thu Sep 11 10:27:07 Especially check lines\r\nGWHOST= and GAWSERV= . (1)|'eventlog'=1;2;2directory).\r\n```\r\n\r\n<br>\r\n\r\nAny Idea?\r\nThanks"},"comment":{"url":"https://api.github.com/repos/mickem/nscp/issues/comments/68792740","html_url":"https://github.com/mickem/nscp/issues/32#issuecomment-68792740","issue_url":"https://api.github.com/repos/mickem/nscp/issues/32","id":68792740,"user":{"login":"gitpumawit","id":8735861,"avatar_url":"https://avatars.githubusercontent.com/u/8735861?v=3","gravatar_id":"","url":"https://api.github.com/users/gitpumawit","html_url":"https://github.com/gitpumawit","followers_url":"https://api.github.com/users/gitpumawit/followers","following_url":"https://api.github.com/users/gitpumawit/following{/other_user}","gists_url":"https://api.github.com/users/gitpumawit/gists{/gist_id}","starred_url":"https://api.github.com/users/gitpumawit/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gitpumawit/subscriptions","organizations_url":"https://api.github.com/users/gitpumawit/orgs","repos_url":"https://api.github.com/users/gitpumawit/repos","events_url":"https://api.github.com/users/gitpumawit/events{/privacy}","received_events_url":"https://api.github.com/users/gitpumawit/received_events","type":"User","site_admin":false},"created_at":"2015-01-05T22:21:53Z","updated_at":"2015-01-05T22:21:53Z","body":"Thanks, i didn’t find time to test .. sorry\r\n\r\n[Würth ITensis AG]\r\n\r\nMarcel Puschnig\r\nICT System Manager / Network Engineer\r\nAspermontstrasse 1\r\nCH - 7000 Chur\r\nTelefon:\r\nFax:\r\nE-Mail:\r\nWebseite:\r\n\r\n+41 81 558 31 13\r\n+41 81 558 34 13\r\nmarcel.puschnig@wuerth-itensis.com\r\nwww.wuerth-itensis.com\r\n\r\n\r\nVon: Michael Medin [mailto:notifications@github.com]\r\nGesendet: Montag, 5. Januar 2015 21:16\r\nAn: mickem/nscp\r\nCc: Puschnig Marcel\r\nBetreff: Re: [nscp] check_eventlog - not like (#32)\r\n\r\n\r\nPlease reopen if this is still a problem in 0.4.3\r\n\r\n—\r\nReply to this email directly or view it on GitHub<https://github.com/mickem/nscp/issues/32#issuecomment-68771460>.\r\n"}}