Windows 2000 System
Checks
2000 system to determine if it is up. Alarm is raised if the 2000 system does not respond to a probe
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[TIME] expands to the current time.
[DATE] expands to the current date.
[AGENT] expands
to the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
Windows XP System
Checks
XP system to determine if it is up. Alarm is raised if the XP system does not respond to a probe
[TYPE] expands
to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[TIME] expands to the current time.
[DATE] expands to the current date.
[AGENT] expands
to the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
Disk Space
Monitors
disk volume free space on Windows (Win32) systems. Alarm raised if free space falls below a specified amount or percent of
total space.
[TYPE] expands to the monitored object's type.
[ID] expands to the monitored object's
unique identification string.
[DESC] expands to the monitored object's long description.
[ALARMID]expands to the
unique numeric identifier for the monitored object's current alarm event.
[SYSNAME]expands to the system being monitored.
[VOLNAME]expands
to the disk volume name.
[VOLLABEL]expands to the disk volume label.
[VOLFS] expands to the disk volume file system
name.
[VOLSIZE]expands to the disk volume size in bytes.
[VOLFREE]expands to the current disk volume free space in bytes.
[THRESHTYPE]expands
to the free space threshold type, blank=actual bytes, "PCT"=percent free.
[THRESHOLD]expands to the free space threshold
value.
[TIME] expands to the current time.
[DATE] expands to the current date.
[AGENT] expands to
the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
NetWare Server
Checks
NetWare server to determine if it is up. Alarm is raised if the server does not respond to a probe.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[TIME] expands to the current time.
[DATE] expands to the current date.
[AGENT] expands
to the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
TCP/IP Device
(Ping)
Checks any device supporting TCP/IP by pinging it. Alarm is raised if the device does not respond to a ping.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[TIME] expands to the current time.
[DATE] expands to the current date.
[AGENT] expands
to the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
Host Process
Checks
host system (via Telnet) for a list of processes expected to be present. Alarm is raised if a process is not present.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[SYSNAME]expands to the system being monitored.
[PROCESS]expands to the process name that has generated
the alarm.
[STATUS]expands to the status message for the process that has generated the alarm.
[TIME] expands to
the current time.
[DATE] expands to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands
to the name of this system.
Host Volume
Checks
host system (via Telnet) for disk volume free space. Alarm is raised if volume free space drops below a selected threshhold.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[SYSNAME]expands to the system being monitored.
[VOLNAME]expands to the disk volume name.
[VOLLABEL]expands
to the disk volume label.
[VOLFS] expands to the disk volume file system name.
[VOLSIZE]expands to the disk volume
size.
[VOLFREE]expands to the current disk volume free space.
[THRESHTYPE]expands to the free space threshold type,
blank=actual size, "PCT"=percent free.
[THRESHOLD]expands to the free space threshold value.
[TIME] expands to
the current time.
[DATE] expands to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands
to the name of this system.
Host Login
Checks
availability of host systems and performs monitoring functions by logging on to the host.
[TYPE] expands
to the monitored object's type.
[ID] or [IDX]expands to the monitored object's unique indentification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[HOST] expands to the host name.
[USER] expands to the user name.
[SCRIPTFILE]expands
to the script file name.
[INTERVAL]expands to the Interval seconds.
[DELAY] expands to the Delay seconds.
[SEVERITY]expands
to the Severity value.
[DATE] expands to the current date.
[AGENT] expands to the the application name of
"Nightwatch".
[SYSTEM]expands to the name of this system.
Disk File
Examines
new records in disk files and checks for alarm conditions by matching the files contents against a list of words or phrases.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[RECORD]expands to the text of the disk file record.
[TIME] expands to the current time.
[DATE] expands
to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands to the name of
this system.
Service
Checks
Windows Services on the local or remote NT/2000/XP system and raises an alarm if the service is not running. Can attempt to
restart failed services.
[TYPE] expands to the monitored object's type.
[ID] expands to the monitored
object's unique identification string.
[DESC] expands to the monitored object's long description.
[SVCNAME]expands
to the service name.
[DISPNAME]expands to the service display name.
[TARGET]expands to the target system name.
[ALARMID]expands
to the unique numeric identifier for the monitored object's current alarm event.
[STATE] expands to the service's
current state.
[WINEXIT]expands to the service's Win32 Exit Code.
[SVCEXIT]expands to the service's own Exit Code.
[TIME] expands
to the current time.
[DATE] expands to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands
to the name of this system.
Performance Counter
Query
Checks Windows Performance Counters on the local or remote NT/2000/XP system and raises an alarm if counter values
are out of tolerance.
[TYPE] expands to the monitored object's type.
[ID] expands to the monitored
object's unique identification string.
[IDX] expands to the monitored object's identification string and includes
the target system name.
[TARGET]expands to the target system name.
[DESC] expands to the monitored object's long
description.
[ALARMID]expands to the unique numeric identifier for the monitored object's current alarm event.
[PATH] expands
to the full counter path that caused the current alarm.
[NAME] expands to the counter name without it's object
path.
[RELOP] expands to the relop for the counter that caused the current alarm.
[TEST] expands to the test
value defined for the counter that caused the current alarm.
[VALUE] expands to the actual retrieved counter value
for the counter that caused the current alarm.
[COUNTER]expands to a formatted string with full counter path, relop, test
value and current value giving a complete description of the counter.
[COUNTERN]same as [COUNTER] but with counter name
instead of full path.
[DATE] expands to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands
to the name of this system.
Win32 Process checking
Checks
a list of processes on the local or remote Windows 32 bit system to ensure the processes are running. Raises an alarm if a
process is not present.
[TYPE] expands to the monitored object's type.
[ID] expands to the monitored
object's unique identification string, the name or IP address of the target system or blank for local system.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[SYSNAME]expands to the name or IP address of the target system or "Local System".
[PROCESS]expands
to the name of the process that has generated the current alarm.
[STATUS]expands to the description of the problem with
the current process.
[TIME] expands to the current time.
[DATE] expands to the current date.
[AGENT] expands
to the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
Windows Management
Instrumentation (WMI) Query
Checks WMI objects on the local or remote Windows system and raises an alarm if WMI object
values are out of tolerance.
[TYPE] expands to the monitored object's type.
[ID] expands to the
monitored object's unique identification string.
[IDX] expands to the monitored object's identification string and
includes the target system name.
[TARGET]expands to the target system name.
[DESC] expands to the monitored object's
long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's current alarm event.
[PATH] expands
to the full object path that caused the current alarm.
[OBJECT] expands to the object name without key selection.
[KEY] expands
to the name of the object property being used as an instance key.
[KEYVAL] expands to the key value being used to
select an instance of the WMI object.
[PROPERTY]expands to the name of the object property to be tested.
[CIMTYPE]expands
to the data type of the property.
[RELOP] expands to the relop for the object's current value to the test value.
[TEST] expands
to the test value defined for the object.
[VALUE] expands to the actual retrieved property value for the object that
caused the current alarm.
[FOBJECTP]expands to a formatted string with full object path, property, relop, test value and
current value giving a complete description of the property.
[FOBJECT]same as [FOBJECTP] but with property name only instead
of full path.
[DATE] expands to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands
to the name of this system.
Domain Name System
Checks
DNS servers and raises and alarm if the server does not respond or incorrectly resolves sample requests.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string,
the Request string.
[DESC] expands to the monitored object's long description.
[ALARMID]expands to the unique
numeric identifier for the monitored object's current alarm event.
[REQUEST]expands to the Request string sent to the DNS
server.
[REPLYTEST]expands to expected reply string.
[LASTREPLY]expands to the last reply received from the DNS server.
[LASTERROR]expands
to the last error posted by this monitored object.
[TIME] expands to the current time.
[DATE] expands to the
current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands to the name of this
system.
SNMP Query
Checks
SNMP Mib object values on SNMP agents and raises an alarm if object values are out of tolerance.
[TYPE] expands
to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[IDX] expands
to the monitored object's unique indentification string plus the target system.
[DESC] expands to the monitored object's
long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's current alarm event.
[TARGET]expands
to the target system name or IP address.
[OBJECT] expands to the full description of the object that caused the current
alarm, including the relop, test value and current value.
[OBJNAME]expands to the name of the object that caused the current
alarm.
[COMMUNITY]expands to the community name.
[OBJID] expands to the object ID of the object that caused the
current alarm.
[RELOP] expands to the relop for the objectr that caused the current alarm.
[TEST] expands
to the test value defined for the object that caused the current alarm.
[VALUE] expands to the actual retrieved object
value for the object that caused the current alarm.
[DATE] expands to the current date.
[AGENT] expands to
the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
TCP Services
Checks
the availability of TCP Network Services (such as FTP, SMTP, HTTP and more) on selected systems.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string,
the name or IP address of the target system.
[DESC] expands to the monitored object's long description.
[ALARMID]expands
to the unique numeric identifier for the monitored object's current alarm event.
[SVCNAME]expands to the name and port
number of the TCP Service that has failed testing.
[SVCERROR]expands to a description of the error when a service fails
testing.
[TIME] expands to the current time.
[DATE] expands to the current date.
[AGENT] expands to
the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
Web Page
Checks
web servers by Downloading a specified web page from the server. Raises an alarm if the page fails to download or takes too
long.
[TYPE] expands to the monitored object's type.
[ID] expands to the monitored object's unique
identification string.
[DESC] expands to the monitored object's long description.
[ALARMID]expands to the unique
numeric identifier for the monitored object's current alarm event.
[TIME] expands to the current time.
[DATE] expands
to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands to the name of
this system.
Email Check
Reads
email messages on mail server and scans them for text strings. Generate alarm or execute Task if strings found.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[SERVER] expands to the name/IP address of the mail server.
[SUBJECT]expands to the SUBJECT
field of the mail message.
[BODY] expands to the body of the mail message.
[FROM] expands to the FROM field
of the mail message.
[SENDER] expands to the SENDER field of the mail message.
[TO] expands to the TO field
of the mail message.
[CC] expands to the CC field of the mail message.
[REPLYTO]expands to the REPLY-TO field of
the mail message.
[MSGID] expands to the unique mail message identfier assigned by the mail server.
[MAILER] expands
to the name of the mail client that created the message.
[ORG] expands to the name of the organization that owns the
mail server.
[TIME] expands to the current time.
[DATE] expands to the current date.
[AGENT] expands
to the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
Email Ping
Sends
a unique mail message to a mail server and tries to read that message back in a set time period to monitor timely mail delivery.
[TYPE]
expands to the monitored object's type.
[ID] expands to the monitored object's unique identification string.
[DESC] expands
to the monitored object's long description.
[ALARMID]expands to the unique numeric identifier for the monitored object's
current alarm event.
[SERVER] expands to the name/IP address of the mail server.
[RECIP] expands to the recipient
of the ping mail message.
[TIMEOUT]expands to the ping timeout value.
[TIME] expands to the current time.
[DATE] expands
to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands to the name of
this system.
Syslog
Receives
Syslog logging messages from Unix systems and raises alarms as needed based on message severity or searching the message for
specified words or phrases. Allows Nightwatch to monitor Unix host systems.
[TYPE] expands to the monitored
object's type.
[ID] expands to the monitored object's unique identification string. Will be name or IP address of
associated host system or blank for default.
[IDX] expands to the formatted identification string. Same as [ID] except
for the default Syslog MO. Then this expands to "Default".
[DESC] expands to the monitored object's long description.
[ALARMID]expands
to the unique numeric identifier for the monitored object's current alarm event.
[SENDER] expands to the IP address
of the sending system.
[LEVEL] expands to the severity level code in the message.
[FACILITY]expands to the facility
code in the message.
[MSG] expands to the text of the Syslog message.
[TIME] expands to the current time.
[DATE] expands
to the current date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands to the name of
this system.
SNMP Trap
Receives
SNMP Trap messages from SNMP agents and raises alarms. Allows Nightwatch to handle SNMP Traps.
[TYPE] expands
to the monitored object's type.
[ID] expands to the monitored object's unique identification string. This is the value
of the Agent field.
[DESC] expands to the monitored object's long description.
[ALARMID]expands to the unique numeric
identifier for the monitored object's current alarm event.
[SOURCE]expands to the IP address or name of the sending system.
[TRAPTEXT]expands
to the formatted text of the trap message.
[SYSNAME]expands to the name of the sending system, as retrieved from that system.
[SYSIP] expands
to the IP address of the sending system.
[SYSDESC]expands to the system description text retrieved from the sending system.
[SYSLOC]expands
to the location text retrieved from the sending system.
[SYSCON]expands to the contact name retrieved from the sending
system.
[COMMUNITY]expands to the community name under which the trap was sent.
[TRAPOID]expands to the trap's SNMP
object ID.
[TRAPNUM]expands the trap's number.
[TRAPNAME]expands to the textual name of the trap if found in one of
the SNMP MIBs.
[STIME] expands to the time the trap was generated. This is from the point of view of the SNMP agent
and is in clock ticks since the agent was initialized.
[OID1] expands to the object ID of the first additional SNMP
object returned in the trap message, if any.
[OIDNAME1]expands to the name of the object ID described above.
[VAL1] expands
to the value of the object ID described above.
[TIME] expands to the current time.
[DATE] expands to the current
date.
[AGENT] expands to the the application name of "Nightwatch".
[SYSTEM]expands to the name of this system.
