Cheshire Cat Computing

Hi Steve
i just working the first time with nsca
and i just configured the server is like the doc of nagios describes
i get following error in the nagios server "Incorrect number of arguments supplied "

from windows Eventlog agent, i can send a test with out any problems
here is a copy of the msg:
msg files

Sep 19 11:20:22 nagiostest nsca[28263]: SERVICE CHECK -> Host Name: 'server', Service Description: 'Test', Return Code: '0', Output: 'This is a test message generated by NagEvLog agent'

and from the nagios.cmd file
[1127121622] PROCESS_SERVICE_CHECK_RESULT;server;Test;0;This is a test message generated by NagEvLog agent

i test it in windows 2000 server and 2003 and i get this error,
posible i forgot to configure something or posible can you give me a tip to
get a solution of this problem i will apreciate that,
Thanks and Regards
Ronnie

_________________
Ronnie

This looks like the agent and NSCA are working, but you have some configuration error in your Nagios definitions. This Nagios error message usually comes for command definitions - check how you have defined the command for this service, it should be some sort of null command.

If you still have problems, post the service definition and corresponding command definition here.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11

_________________
Ronnie

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11

_________________
Ronnie

_________________
Ronnie

When you send a test message, it will go to the application eventlog, not the system. Check that your services defined on the Nagios host are 'Application EventLog' and 'System EventLog'. Check the NSCA and Nagios logs to make sure that the message is in fact coming in to set them.

From your posted logs, you have configured the agent to send an alert to a service called 'Test'. However, the service you have defined on the Nagios host is 'System EventLog'. This doesn't match, so nothing will happen.

Either send the alert to your defined service, or change the name of the service to match what you are sending alerts to.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11

Hi Steve
i just working the first time with nsca
and i just configured the server is like the doc of nagios describes
i get following error in the nagios server "Incorrect number of arguments supplied "

from windows Eventlog agent, i can send a test with out any problems
here is a copy of the msg:
msg files
Sep 12 07:10:40 winnagios2 nsca[12935]: SERVICE CHECK -> Host Name: 'ICCREACRMDB_FM', Service Description: 'Application EventLog', Return Code: '2', Output: 'Application [error] [NagiosEventLog Test #12]: prova '

and, i can send true problems
here is a copy of the msg:
msg files

Sep 12 07:48:53 winnagios2 nsca[12722]: SERVICE CHECK -> Host Name: 'ICCREACRMDB_FM', Service Description: 'Event Viewer Application', Return Code: '2', Output: 'Application [warning] [VxSvc_PercPro #571]: PERC 4/SC Controller 0, Array Disk 0:1 Sense Key = 4, Sense Code = 44, Sense Qualifier = 92. Please refer to the Array Manager Documentation for details. '

but i recived this problem
Host Service Status Last Check Duration Attempt Status Information
ICCREACRMDB_FM
Event Viewer Application
UNKNOWN 12-09-2008 09:03:03 0d 0h 57m 49s 1/1 Incorrect number of arguments supplied
Event Viewer System
UNKNOWN 12-09-2008 09:03:03 0d 0h 57m 49s 1/1 Incorrect number of arguments supplied
EventLog Agent
UNKNOWN 12-09-2008 09:03:03 0d 21h 29m 27s 1/1 Incorrect number of arguments supplied

My configs:
define service{
use EventLog
service_description Event Viewer Application
host_name ICCREACRMDB_FM
active_checks_enabled 0
passive_checks_enabled 1
flap_detection_enabled 0
register 0
is_volatile 0
check_period 24x7
max_check_attempts 1
normal_check_interval 5
retry_check_interval 1
check_freshness 1
freshness_threshold 1800
check_command check_dummy!0!No messages in last 30mins
notification_interval 120
contact_groups admins
notification_period 24x7
notification_options w,u,c,r
stalking_options w,c,u
name EventLog
register 0
}

define service{

use EventLog
service_description EventLog Agent
host_name ICCREACRMDB_FM
active_checks_enabled 0
passive_checks_enabled 1
flap_detection_enabled 0
check_period 24x7
max_check_attempts 1
normal_check_interval 10
retry_check_interval 1
check_command check_dummy!3!Check agent is running
contact_groups admins
notification_interval 120
notification_period 24x7
notification_options c,r
}

define service{
contact_groups admins
use EventLog
service_description Event Viewer Application
host_name ICCREACRMDB_FM
}
define service{
contact_groups admins
use EventLog
service_description Event Viewer System
host_name ICCREACRMDB_FM
}

My filter

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Cheshire Cat]

[HKEY_LOCAL_MACHINE\SOFTWARE\Cheshire Cat\Nagios]
"nscaPassword"="nagios"
"MyHostname"="ICCREACRMDB_FM"
"NSCAD"="10.104.1.14"
"Port"=dword:00001623
"encryptionMethod"=dword:00000001
"DEBUG"=dword:00000000
"logAlerts"=dword:00000000
"maxFilter"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Cheshire Cat\Nagios\Filter0]
"filterDesc"="System Log"
"eventLog"=dword:00000002
"eventLogName"="Security"
"serviceName"="System EventLog"
"ID"=""
"matchString"=""
"source"=""
"Information"=dword:00000000
"status"=dword:00000002
"Warning"=dword:00000000
"Error"=dword:00000001
"Audit Success"=dword:00000000
"Audit Failure"=dword:00000000
"notID"=dword:00000000
"notMatch"=dword:00000000
"notSource"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Cheshire Cat\Nagios\Filter1]
"filterDesc"="Application Eventlog"
"eventLog"=dword:00000001
"eventLogName"="Application"
"serviceName"="Application EventLog"
"ID"=""
"matchString"=""
"source"=""
"Information"=dword:00000000
"status"=dword:00000002
"Warning"=dword:00000000
"Error"=dword:00000001
"Audit Success"=dword:00000000
"Audit Failure"=dword:00000000
"notID"=dword:00000000
"notMatch"=dword:00000000
"notSource"=dword:00000000

Thanks very much
Diego

Ill need to look into this, but I think it is because you are using Nagios 2.x or 3.x with a 1.x version of NSCA. The nagios.cmd format changed between the versions, but the NSCA format did not, so you need a differently compiled NSCA for different versions of Nagios.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11