Ignore:
Timestamp:
04/08/10 21:48:28 (22 months ago)
Author:
mickem
Message:

2010-04-04 MickeM

  • Reverted "major eventlog change" since it did in fact break to many things + Added new major addition to CheckEventLog CheckEventLog has a compleatly new syntax borrowed from SQL. CheckEventLog MaxWarn=1 MaxCrit=1 "filter=(id = 123 OR id = 321) AND (severity='warning' OR severity='error')" Avalible operators are: =, !=, >, <, >=, <=, eq, ne, gt, lt, ge, le, OR, AND Avalible functions are: convert(<value>) (will try to automatically convert type) Avalible variables are: severity (others may work but this will come in the next week)

2010-03-24 MickeM

+ added a new "option" in conjunction with -c you can now do -m to specify the module to load.

nsclient++ -m CheckDisk.dll -c CheckDriveSize MaxWarn=100 CheckAll?
This prevents socket based modules from loading causing "bind" errors.

2010-03-11 MickeM

  • Fixed MAJOR issue with CheckEventLog and this might actually break "existing" checks so let me know. Problem was I matched filter+ incorrectly. + Added new option debug-threshold to set "after which rule" we will start dumping filter matches (very usefull to ignore first rule) CheckEventLog debug=true debug-threshold=1 (will be alot more usefull then without the threshold)
File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/stable/changelog

    r261 r262  
    77 * Fix RtlStringFromGUID problem on NT4 
    88 
    9 2009-03-08 MickeM 
     92010-04-04 MickeM 
     10 - Reverted "major eventlog change" since it did in fact break to many things 
     11 + Added new major addition to CheckEventLog 
     12   CheckEventLog has a compleatly new syntax borrowed from SQL. 
     13   CheckEventLog MaxWarn=1 MaxCrit=1 "filter=(id = 123 OR id = 321) AND (severity='warning' OR severity='error')" 
     14   Avalible operators are: =, !=, >, <, >=, <=, eq, ne, gt, lt, ge, le, OR, AND 
     15   Avalible functions are: convert(<value>) (will try to automatically convert type) 
     16   Avalible variables are: severity (others may work but this will come in the next week) 
     17 
     182010-03-24 MickeM 
     19 + added a new "option" in conjunction with -c you can now do -m to specify the module to load. 
     20   nsclient++ -m CheckDisk.dll -c CheckDriveSize MaxWarn=100 CheckAll 
     21   This prevents socket based modules from loading causing "bind" errors. 
     22 
     232010-03-11 MickeM 
     24 * Fixed MAJOR issue with CheckEventLog and this might actually break "existing" checks so let me know. 
     25   Problem was I matched filter+ incorrectly. 
     26 + Added new option debug-threshold to set "after which rule" we will start dumping filter matches (very usefull to ignore first rule) 
     27   CheckEventLog debug=true debug-threshold=1 (will be alot more usefull then without the threshold) 
     28 
     292010-03-08 MickeM 
    1030 + Added new option append-filter-<key>=<value> to CheckEventLog to allow "and" of filter rules. 
    1131   CheckEventLog file=application file=system filter=out MaxWarn=1 MaxCrit=1 filter-eventID=ne:1 filter-eventID=eq:1 append-filter-eventSource==SecurityCenter truncate=1023 unique descriptions "syntax=%source%: %id% (%count%)" 
     
    1434 + Added so "global" ([Settings] password=...) passwords are read from the NSCA module 
    1535  
    16 2009-02-26 MickeM 
     362010-02-26 MickeM 
    1737 * Changed fo missing files and such generate an error 
    1838 * Added option to return error messages to the client [CheckDisk] show_errors=1 (defauilt is off 0) 
     
    2040 * Fixed major issue with date mathing in CheckFile* which was not working at all. 
    2141 
    22 2009-01-24 MickeM 
     422010-01-24 MickeM 
    2343 * Fixed so files locked for reading can be chcked (basic checks) 
    2444 * Improved speed of file chyecking (does not check file data twice) 
    2545 
    26 2009-01-23 MickeM 
     462010-01-23 MickeM 
    2747 + Added checks for missing path and missing filter on CheckFile2 thus 
    2848    CheckFile2 without paths and/or filters will have status unknown. 
Note: See TracChangeset for help on using the changeset viewer.