RE: check_win_eventlog help

Hi;

I would apreciate any help you can offer as I am new to nagios. After compiling Nagios to support PostresSQL and starting the database I get an error cannot perform instert on programstatus table..I have logged into the database to insure the table is there, I am even able to do an insert into that table..I have hit a brick wall and am not sure where to go from here...I look forward to any in input you could give me that would shine some light on this...I ran strace on the process and found the following:

send(5, "QINSERT INTO programstatus (last"..., 464, 0) = 464

rt_sigaction(SIGPIPE, {SIG_DFL}, {SIG_IGN}, 8) = 0

select(6, [5], [], [5], NULL) = 1 (in [5])

recv(5, "EERROR: Bad abstime external re"..., 16384, 0) = 59

select(6, [5], [], [5], NULL) = 1 (in [5])

Does anyone know what Bad abstime external mean ???? Has anyone seen this problem before ??? Any ideas how to fix this ??

thanks in advance for any help you can provide

Kevin

-----Original Message-----
From: Darrell Mozingo [mailto:dmozingo@xxxxxxxxxxxxxx]
Sent: January 12, 2004 4:33 PM
To: nagiosplug-help@xxxxxxxxxxxxxxxxxxxxx
Subject: [Nagiosplug-help] check_win_eventlog help

I'm using the Windows Eventlog Addon for Nagios (http://sourceforge.net/projects/naplax/, version 0.1.0), with the following command definition:

define command{
        command_name    check_win_applicationlog
        command_line    $USER1$/check_win_eventlog -H $HOSTADDRESS$ -s A -l Application -m $USER6$ -t $USER7$ -q $USER8$
}

Where the user macros are defined in resources.cfg as:

$USER6$="+"
$USER7$="+"
$USER8$="+"

This will retrieve all the entries in the application log, which it does just great. My question is how can I filter out entries I don't want to see? I saw the examples where you can ignore everything but xy, but I want to receive all but xy. Anyone know how I can do that? I tried changing the $USER6$ macro to:

$USER6$="+:Error String"

Which, in theory, would get everything except those events that have "Error String" in them, but it's not working that way. Can anyone help me out with this? Thanks a bunch.

Darrell Mozingo