CheckEventLog

Check for errors and warnings in the event log.

Queries (Overview)

A list of all avalible queries (check commands)

• check_eventlog Check for errors in the event log.

Aliases

A list of all avalible aliases for queries and check commands

• CheckEventLog Alternative name for: check_eventlog Check for errors in the event log.

Commands (executable)

TODO: Add command list

Configuration

Path / Section	Key	Default value	Description
/settings/eventlog/real-time	debug	0	DEBUG
/settings/eventlog/real-time	enabled	0	REAL TIME CHECKING
/settings/eventlog/real-time	log	application,system	LOGS TO CHECK
/settings/eventlog/real-time	startup age	30m	STARTUP AGE
/settings/eventlog/real-time/filters			REALTIME FILTERS
/settings/eventlog	debug	0	DEBUG
/settings/eventlog	lookup names	1	LOOKUP NAMES
/settings/eventlog	buffer size	131072	BUFFER_SIZE
/settings/eventlog	syntax		SYNTAX

Queries (Reference)

A quick reference for all avalible queries (check commands) in the CheckEventLog module.

check_eventlog

Check for errors in the event log.

For details on this command go to the check_eventlog page

Usage: (Click any option to go to the description page for that option)

Option	Default value	Description
help	N/A	Show help screen (this screen)
help-csv	N/A	Show help screen as a comma separated list.
truncate		Truncate the resulting message (mainly useful in older version of nsclient++)
filter		Filter which marks interesting items.
file		The name of an eventlog file the default ones are Application, Security and System. If the specified eventlog was not found due to some idiotic reason windows opens the \application\" log instead."
syntax		A string to use to represent each matched eventlog entry the following keywords will be replaced with corresponding values: %source%, %generated%, %written%, %type%, %severity%, %strings%, %id% and %message% (%message% requires you to set the description flag) %count% (requires the unique flag) can be used to display a count of the records returned.
date-syntax	%#c	Detail level syntax.
debug	N/A	Enable debug information.
descriptions	N/A	Allow searching and scanning and rendering descriptions field (will be much slower).
unique	N/A	Only return one of each message (based on message id and source).
MaxWarn		Maximum number of matches before a warning is returned.
MaxCrit		Maximum number of matches before a critical is returned.
MinWarn		Minimum number of matches before a warning is returned.
MinCrit		Minimum number of matches before a critical is returned.
warn		Expression which raises a warning status.
crit		Expression which raises a critical status.
ignore-perf-data	N/A	Do not return performance data.
ShowAll	short	Show all values not just problems.
ShowFail		Show all values not just problems.