[Xymon] Windows PS client svcs data missing

Scot Kreienkamp SKreien at la-z-boy.com
Mon May 16 15:33:02 CEST 2011


David,

 

I don't really need the event reporting, it's just a nice-to-have.  I'll try disabling it and see if it reduces the load.  

 

Scot Kreienkamp

Senior Systems Engineer

skreien at la-z-boy.com

 

From: David Baldwin [mailto:David.Baldwin at ausport.gov.au] 
Sent: Monday, May 16, 2011 12:53 AM
To: Scot Kreienkamp; xymon at xymon.com
Subject: RE: [Xymon] Windows PS client svcs data missing

 

Scot,

 

One other thing… I noticed that whenever the PS client runs it takes the CPU up to 100% for 5-15 seconds or so on many of the systems it's installed on.  I'm already getting push back from other systems admins because of that.  I imagine many people will be complaining about it sooner or later, that's kind of a bad thing.  J

 

The CPU spike could be the event log reporting – I don’t actually use that part of the client myself (there is a switch to disable event log reporting completely). Get-EventLog cmdlet is very braindead and scans the entire event log every time it runs (the –since “filter” does not use any indexing as far as I can tell on any version of Windows). I forward my event logs with SNARE to a central syslog server and then use winevtmsgs which I have added to xymonton. I did have a go at using .Net to properly “tail” the event logs, but didn’t get that finished to add to the client. Might take another look at that when I get a chance.

 

David.

 

Scot Kreienkamp

Senior Systems Engineer

skreien at la-z-boy.com

 

From: David Baldwin [mailto:david.baldwin at ausport.gov.au] 
Sent: Monday, May 09, 2011 9:31 PM
To: Scot Kreienkamp; xymon at xymon.com
Subject: Re: [Xymon] Windows PS client svcs data missing

 

On 10/05/11 2:09 AM, Scot Kreienkamp wrote: 

Hi everyone,

 

I've run into a problem with the Windows Powershell client intermittently omitting service data on Win2008.  Here's the relevant parts of the client data file:

 

Microsoft Windows Server 2008 R2 Standard   (build 7600)

---snip---

Persistent Routes:

  None

[ifstat]

fe80::619f:8c8:bf22:6ca5%11 2254617444 2999570366

10.100.1.211 2254617444 2999570366

::1 0 0

127.0.0.1 0 0

[svcs]

Name                                    StartupType  Status         DisplayName

[uptime]

sec: 8168297

94 days 12 hours 58 minutes 17 seconds

Bootup: 20110203213923.713291-360

[who]

SESSIONNAME       USERNAME                 ID  STATE   TYPE        DEVICE

---snip---

 

As you can see, the svcs portion is empty.  I already updated the client to the latest PS client files available and it still is happening. I'm not a programmer so I'm not sure how I can help troubleshoot this, but I'm willing to help in any way I can.

services information is gathered from WMI. The builtin powershell "get-services" doesn't return sufficient information.

Try the following:

open a powershell window (powershell.exe lives in C:\WINDOWS\system32\windowspowershell\v1.0)

Get-WmiObject -Class Win32_Service

Try running it a few times. Is it slow, or does it sometimes not return any information?

Also, if you look at the Client data report (link at the bottom of various pages - cpu, disk, procs, svcs), do you see sections for [WMI:Win32...] towards the bottom of the report. There should be:

WMI:Win32_OperatingSystem
WMI:Win32_ComputerSystem
WMI:Win32_BIOS
WMI:Win32_Processor
WMI:Win32_PhysicalMemory
WMI:Win32_LogicalDisk
WMI:Win32_QuickFixEngineering
WMI:Win32_Product
 

If these are missing there may be a problem with the WMI service. Try restarting it in the first instance.

David.

 

Thanks!

 

Scot Kreienkamp

skreien at la-z-boy.com

 

 

 

 

This message is intended only for the individual or entity to which it is addressed.  It may contain privileged, confidential information which is exempt from disclosure under applicable laws.  If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information.  If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you. 

 

-- 
David Baldwin - IT Unit
Australian Sports Commission          www.ausport.gov.au
Tel 02 62147830 Fax 02 62141830       PO Box 176 Belconnen ACT 2616
david.baldwin at ausport.gov.au          Leverrier Street Bruce ACT 2617

 

________________________________

Keep up to date with what's happening in Australian sport visit www.ausport.gov.au 

This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender. 

________________________________

 

 

 

This message is intended only for the individual or entity to which it is addressed.  It may contain privileged, confidential information which is exempt from disclosure under applicable laws.  If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information.  If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you. 




This message is intended only for the individual or entity to which it is addressed.  It may contain privileged, confidential information which is exempt from disclosure under applicable laws.  If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information.  If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you. 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20110516/767443e9/attachment.html>


More information about the Xymon mailing list