Ticket #23 (closed defect: worksforme)
Combine Filters in CheckEventLog does not work in V2.6
| Reported by: | frank@… | Owned by: | mickem |
|---|---|---|---|
| Priority: | 1 | Milestone: | |
| Component: | CheckSystem | Version: | 0.2.6 |
| Severity: | Bugs | Keywords: | Eventlog |
| Cc: |
Description
./check_nrpe -H 192.168.238.222 -c CheckEventLog -a MaxCrit=1 file=Anwendung filter-generated=\<6d filter-message=substr:Linux filter=all filter=in truncate=100 descriptions
I tried this against V2.6 and V2.5h. with 2.5 i get e.g. within 6 days 20 matches and if i change to 1day e.g. 2 matches These are the right values.
with v2.6 the result is always Status OK and no result. Without the filter-generated Parameter I got e.g. 100 matches.
Change History
comment:2 Changed 5 years ago by mickem
- Status changed from new to closed
- Resolution set to worksforme
Humm, looks strange the "counter" was an unsigned integer (thats around 4.000.000.000) I have now explicitly set it to unsigned long int if it for some strange reason thought int was less then long int (32bit).
Also the timeout issues might be causing this (as mentioned in the other post)?
I have again rewritten the filter handler so making filters are (I hope) simpler but I don't think this is much of an issue...
MickeM
Correction: behaviour not depends on the Version but on the count of the event log rows maybe there is an integer problem : we have more than 32768 rows. I Tried diffent envent logs with less rows and noticed no problem with the filter parameter