How to monitor a specific Microsoft windows eventid with OP5 Monitor?
You can use a function builtin to NSClient. The function is called check_eventlog. Download the latest version of NSClient++ from this page:
When you have installed the agent you only have to create a new check command like this:
Create a service that uses the check command above:
This service will now check for event-id 903 in the and warn you if it finds any events with that id during the latest 24 hours.
The complete documentation for check_eventlog can be found here: