Ignore:
Timestamp:
04/22/10 16:17:46 (22 months ago)
Author:
mickem
Message:

2010-04-21 MickeM - 0.3.8 RC1

+ Added support for strings and int (values) to CheckSingleRegEntry?

Use like so (int):

CheckSingleRegEntry? path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet?\services\eventlog\Application\MaxSize? "syntax=%path%: %int%" warn==20971520 crit==20971520 check=int ShowAll=long
CheckSingleRegEntry? path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet?\services\eventlog\Application\MaxSize? "syntax=%path%: %int%" warn==30971520 crit==30971520 check=int ShowAll=long

Use like so (string):

CheckSingleRegEntry? path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet?\services\eventlog\Application\MaxSize? "syntax=%path%: %string%" warn==20971520 crit==20971520 check=string ShowAll=long
CheckSingleRegEntry? path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet?\services\eventlog\Application\MaxSize? "syntax=%path%: %string%" warn==30971520 crit==30971520 check=string ShowAll=long

This can ofcourse be combined and all valid operators (like regexp, substr, lt, gt, ne etc etc are supported.


2010-04-16 MickeM

+ Added new Check to CheckSystem: CheckSingleRegEntry?

Similar to the previous CheckSIngleFile but can be used to check aspects of registry entries.

CheckSingleRegEntry? path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet?\services\eventlog\Application\MaxSize? "syntax=%path%: %exists%" warn==true crit==true check=exists ShowAll=long

CheckSingleRegEntry? path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet?\services\eventlog\Application\MaxSizeYY "syntax=%path%: %exists%" warn==true crit==true check=exists ShowAll=long

Currently only supports checking existanse of keys but more checks will be added soon.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/stable/changelog

    r263 r264  
    77 * Fix RtlStringFromGUID problem on NT4 
    88 
    9 2010-04-09 MickeM 
     92010-04-21 MickeM - 0.3.8 RC1 
     10 + Added support for strings and int (values) to CheckSingleRegEntry 
     11   Use like so (int): 
     12    CheckSingleRegEntry path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\MaxSize "syntax=%path%: %int%"  warn==20971520 crit==20971520 check=int ShowAll=long 
     13    CheckSingleRegEntry path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\MaxSize "syntax=%path%: %int%"  warn==30971520 crit==30971520 check=int ShowAll=long 
     14   Use like so (string): 
     15    CheckSingleRegEntry path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\MaxSize "syntax=%path%: %string%"  warn==20971520 crit==20971520 check=string ShowAll=long 
     16    CheckSingleRegEntry path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\MaxSize "syntax=%path%: %string%"  warn==30971520 crit==30971520 check=string ShowAll=long 
     17   This can ofcourse be combined and all valid operators (like regexp, substr, lt, gt, ne etc etc are supported. 
     18    
     192010-04-16 MickeM 
     20 + Added new Check to CheckSystem: CheckSingleRegEntry 
     21   Similar to the previous CheckSIngleFile but can be used to check aspects of registry entries. 
     22     CheckSingleRegEntry path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\MaxSize "syntax=%path%: %exists%"  warn==true crit==true check=exists ShowAll=long 
     23   CheckSingleRegEntry path=HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\MaxSizeYY "syntax=%path%: %exists%"  warn==true crit==true check=exists ShowAll=long 
     24   Currently only supports checking existanse of keys but more checks will be added soon. 
     25 
     262010-04-14 MickeM 
     27 ! Fixed erroneous error message "Failed to peek buffer" 
     28  
     292010-04-13 MickeM 
    1030 + Added support for dates in the new CheckEventLog so the following are equvivalent: 
    11     CheckEventLog debug=true file=application file=system MaxWarn=1 MaxCrit=1 "filter=generated lt -2d AND severity = 'error'" truncate=800 unique descriptions "syntax=%severity%: %source%: %strings% (%count%)" 
     31    CheckEventLog debug=true file=application file=system MaxWarn=1 MaxCrit=1 "filter=generated gt -2d AND severity = 'error'" truncate=800 unique descriptions "syntax=%severity%: %source%: %strings% (%count%)" 
    1232    CheckEventLog debug=true file=application file=system filter=new filter=in MaxWarn=1 MaxCrit=1 filter+generated=gt:2d filter+severity==error truncate=800 unique descriptions "syntax=%severity%: %source%: %strings% (%count%)" debug-threshold=100 
    1333 
Note: See TracChangeset for help on using the changeset viewer.