# Invoke-IcingaCheckEventlog - Monitor VEEAM Agent

**URL:** <https://community.icinga.com/t/invoke-icingacheckeventlog-monitor-veeam-agent/12952>\
**Category:** Icinga Web Modules\
**Tags:** windows-agent\
**Created:** [November 23, 2023, 12:56pm UTC](https://community.icinga.com/t/invoke-icingacheckeventlog-monitor-veeam-agent/12952 "2023-11-23T12:56:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![InformatikKFM](https://community.icinga.com/letter_avatar_proxy/v4/letter/i/2acd7d/32.png) [@InformatikKFM](https://community.icinga.com/u/InformatikKFM)\
**Post date:** [November 23, 2023, 12:56pm UTC](https://community.icinga.com/t/invoke-icingacheckeventlog-monitor-veeam-agent/12952/1 "2023-11-23T12:56:09Z")

</div>

Hello,

I would like to monitor the data backup via VEEAM Agent using Invoke-IcingaCheckEventlog. I have already played around with the parameters several times, but without success. I would like to go to Warning if no entry with EventID 190 has been created within the last 24 hours and to Critical if it is 36 hours.

> Invoke-IcingaCheckEventlog -LogName “Veeam Agent” -IncludeSource “Veeam Agent” -IncludeEventId 190 -Verbosity 3 -IncludeMessage “_Success_” -after 24h  
> -Critical 1:  
> [OK] EventLog: 1 Ok (All must be [OK])  
> \_ [OK] Between: [23.11.2023 00:39:59] - [23.11.2023 00:39:59] there occurred 1 event(s). (All must be [OK])  
> \_ [OK] Event Message: Veeam Agent ‘Job Server’ finished with Success.Job details: Backup has been created.: 0  
> \_ [OK] EventId 190: 1  
> | ‘190::ifw\_eventlog::count’=1c;;  
> 0

Any Ideas?

---

<div class="post-metadata">

**Author:** ![moreamazingnick](https://community.icinga.com/user_avatar/community.icinga.com/moreamazingnick/32/7725_2.png) [@moreamazingnick](https://community.icinga.com/u/moreamazingnick)\
**Post date:** [November 23, 2023, 5:22pm UTC](https://community.icinga.com/t/invoke-icingacheckeventlog-monitor-veeam-agent/12952/2 "2023-11-23T17:22:44Z")

</div>

> [@InformatikKFM](#):
>
> Invoke-IcingaCheckEventlog

the check can’t do that, but you can create to services with different thresholds and different after parameter so one will be in warning state and the other can reach critical state.

or you write your own plugin

---

<div class="post-metadata">

**Author:** ![moreamazingnick](https://community.icinga.com/user_avatar/community.icinga.com/moreamazingnick/32/7725_2.png) [@moreamazingnick](https://community.icinga.com/u/moreamazingnick)\
**Post date:** [February 14, 2024, 8:42am UTC](https://community.icinga.com/t/invoke-icingacheckeventlog-monitor-veeam-agent/12952/3 "2024-02-14T08:42:59Z")

</div>

can’t edit the post anymore…

the check can’t do that, but you can create **two** services with different thresholds and different `after`  
parameter so one will be in warning state and the other can reach critical state.

or you write your own plugin

Did that solve you problem?