NSClient / NRPE: filter / exclude services from eventlog check

Service Monitoring
1

Hi,

I´ve searched at the official NSClient++ documentation (https://docs.nsclient.org/reference/windows/CheckEventLog/#check_eventlog_filter) about the possibilities to exclude specific service (names) from eventlog to be checked, because it doesn´t mind if they fail. But I haven´t found any clear / suitable possibility.

Is there anybody, who has experiences in building such a filter?

2

Hi Ben,

You can filter on any part of the event, for example:

“filter=provider= ‘XXXX’ and level= ‘error’ and message not like ‘%XXXX%’”

Hope this help