I normally just run a daily report out of cron that essentially runs this command…
grep “Passive check result was received for service” /usr/local/nagios/var/nagios.log | grep “host could not be found” | awk ‘{print $13}’ | sort | uniq | sed ‘s/,//g’ | sed “s/’//g”
I guess you could probably roll this into a plugin though.