[xymon] Windows Event logs monitor added to Xymonton

[David Baldwin]

TJ,
> Do you have windows XP client monitored in central mode ?
> Does those XP clients have same issue ?
>
> BBWin is only tested in NT/2000/XP Windows OS, according to the SF
> project site(R1).
>
>   
I'm running it on 2003 and 2008 servers. Other report sections are all
OK in general operation, [msgs] that is the problem.The [route] report
is different on the first report after startup, but OK after that.

I'm wondering if writing a perl-based Windows client and then packaging
as a .EXE using pp under Strawberry perl might be an alternative.
hobbit-client.sh on Unix is pretty simple - just wraps the output of a
few different commands into a single client report.

Could give a bit more impetus to getting the perl libraries sorted too.
Hope people have taken a look at the Wiki page:
https://sourceforge.net/apps/mediawiki/xymon/index.php?title=Perl_Library_Discussion

Thanks, David.
> tj
>
> R1: http://sourceforge.net/projects/bbwin/
> On Tue, Aug 17, 2010 at 9:14 PM, TJ Yang <tjyang2001 at gmail.com> wrote:
>   
>> Thanks, David
>> I added your report as a bug here
>> https://sourceforge.net/tracker/?func=detail&aid=3047417&group_id=136450&atid=735923
>>
>> tj
>> On Tue, Aug 17, 2010 at 6:23 PM, David Baldwin
>> <david.baldwin at ausport.gov.au> wrote:
>>     
>>> TJ Yang wrote:
>>>       
>>>> On Tue, Aug 17, 2010 at 4:09 AM, David Baldwin
>>>> <david.baldwin at ausport.gov.au> wrote:
>>>>
>>>>         
>>>>> This is my solution for the deficiencies of both BBNT's msgs and BBwin
>>>>> (broken in central mode) windows event log reporting.
>>>>>
>>>>>           
>>>> I am preparing to deploy BBWin 0.12 at work.
>>>>
>>>> Would you please elaborate more how BBWin central mode msgs reporting
>>>> is broken ?
>>>>
>>>>         
>>> The ignore filtering and size limiting has no effect. I currently have
>>> the following in /etc/hobbit/client-local.cfg - doesn't do anything useful.
>>>
>>> [win32]
>>> log:eventlog_security:10240
>>> ignore .*
>>> ignore .
>>> msgs:eventlog_security:10240
>>> ignore .*
>>> ignore .
>>> eventlog:security:10240
>>> ignore Windows Filter
>>> ignore handle
>>> ignore .*
>>> ignore .
>>> eventlog:System:10240
>>> ignore .*
>>> ignore .
>>> eventlog:application:10240
>>> ignore .*
>>> ignore .
>>>
>>> I also have success and failure auditing turned on - which means the
>>> event log reports can be very big. Too big for hobbitd to handle even
>>> with MAXMSG_DATA set at values like 15242880 (i.e. 15MB), so I get
>>> "flooding" client errors.
>>>
>>> Also, the event log subsystem has changed in Vista and Server 2008.
>>> Neither BBNT or BBWin seems to handle event log processing properly for
>>> these.
>>>
>>> Thanks, David.
>>>
>>> --
>>> David Baldwin - IT Unit
>>> Australian Sports Commission          www.ausport.gov.au
>>> Tel 02 62147830 Fax 02 62141830       PO Box 176 Belconnen ACT 2616
>>> david.baldwin at ausport.gov.au          Leverrier Street Bruce ACT 2617
>>>
>>>
>>> -------------------------------------------------------------------------------------
>>> Keep up to date with what's happening in Australian sport visit http://www.ausport.gov.au
>>>
>>> This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.
>>> -------------------------------------------------------------------------------------
>>>
>>> To unsubscribe from the xymon list, send an e-mail to
>>> xymon-unsubscribe at xymon.com
>>>
>>>
>>>
>>>       
>>
>> --
>> T.J. Yang
>>
>>     
>
>
>
>   


-- 
David Baldwin - IT Unit
Australian Sports Commission          www.ausport.gov.au
Tel 02 62147830 Fax 02 62141830       PO Box 176 Belconnen ACT 2616
david.baldwin at ausport.gov.au          Leverrier Street Bruce ACT 2617