<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> David Baldwin [mailto:david.baldwin@ausport.gov.au] <br><b>Sent:</b> Monday, May 09, 2011 9:31 PM<br><b>To:</b> Scot Kreienkamp; xymon@xymon.com<br><b>Subject:</b> Re: [Xymon] Windows PS client svcs data missing<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>On 10/05/11 2:09 AM, Scot Kreienkamp wrote: <o:p></o:p></p><p class=MsoNormal>Hi everyone,<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>I've run into a problem with the Windows Powershell client intermittently omitting service data on Win2008. Here's the relevant parts of the client data file:<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Microsoft Windows Server 2008 R2 Standard (build 7600)<o:p></o:p></p><p class=MsoNormal>---snip---<o:p></o:p></p><p class=MsoNormal>Persistent Routes:<o:p></o:p></p><p class=MsoNormal> None<o:p></o:p></p><p class=MsoNormal>[ifstat]<o:p></o:p></p><p class=MsoNormal>fe80::619f:8c8:bf22:6ca5%11 2254617444 2999570366<o:p></o:p></p><p class=MsoNormal>10.100.1.211 2254617444 2999570366<o:p></o:p></p><p class=MsoNormal>::1 0 0<o:p></o:p></p><p class=MsoNormal>127.0.0.1 0 0<o:p></o:p></p><p class=MsoNormal>[svcs]<o:p></o:p></p><p class=MsoNormal>Name StartupType Status DisplayName<o:p></o:p></p><p class=MsoNormal>[uptime]<o:p></o:p></p><p class=MsoNormal>sec: 8168297<o:p></o:p></p><p class=MsoNormal>94 days 12 hours 58 minutes 17 seconds<o:p></o:p></p><p class=MsoNormal>Bootup: 20110203213923.713291-360<o:p></o:p></p><p class=MsoNormal>[who]<o:p></o:p></p><p class=MsoNormal>SESSIONNAME USERNAME ID STATE TYPE DEVICE<o:p></o:p></p><p class=MsoNormal>---snip---<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>As you can see, the svcs portion is empty. I already updated the client to the latest PS client files available and it still is happening. I'm not a programmer so I'm not sure how I can help troubleshoot this, but I'm willing to help in any way I can.<o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>services information is gathered from WMI. The builtin powershell "get-services" doesn't return sufficient information.<br><br>Try the following:<br><br>open a powershell window (powershell.exe lives in C:\WINDOWS\system32\windowspowershell\v1.0)<br><br>Get-WmiObject -Class Win32_Service<br><br>Try running it a few times. Is it slow, or does it sometimes not return any information?</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Sometimes it returns instantly, sometimes it takes 3-4 seconds, but it always returned info. Also, there was no load on the server the last time the report came in blank. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br><br>Also, if you look at the Client data report (link at the bottom of various pages - cpu, disk, procs, svcs), do you see sections for [WMI:Win32...] towards the bottom of the report. There should be:<o:p></o:p></span></p><pre>WMI:Win32_OperatingSystem<o:p></o:p></pre><pre>WMI:Win32_ComputerSystem<o:p></o:p></pre><pre>WMI:Win32_BIOS<o:p></o:p></pre><pre>WMI:Win32_Processor<o:p></o:p></pre><pre>WMI:Win32_PhysicalMemory<o:p></o:p></pre><pre>WMI:Win32_LogicalDisk<o:p></o:p></pre><pre>WMI:Win32_QuickFixEngineering<o:p></o:p></pre><pre>WMI:Win32_Product<o:p></o:p></pre><pre><o:p> </o:p></pre><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>If these are missing there may be a problem with the WMI service. Try restarting it in the first instance.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Yes, I see those in the report. <o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Yesterday when the problem was happening I restarted the server… still the same problem after the reboot. Not sure if it makes any difference or not, but mostly where I'm seeing these are VM's running under VMWare. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br><br>David.<br><br><o:p></o:p></span></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Thanks!<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Scot Kreienkamp</span><o:p></o:p></p><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><a href="mailto:skreien@la-z-boy.com">skreien@la-z-boy.com</a></span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> <span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><hr size=2 width="100%" align=center></span></div></div><FONT face=Tahoma size=2><FONT color=#0000ff></FONT></FONT>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 8pt; COLOR: gray"><FONT face=Arial></FONT></SPAN> </P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 8pt; COLOR: gray"><FONT face=Arial></FONT></SPAN> </P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"> </P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 8pt; COLOR: gray"><FONT face=Arial>This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you. <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p></FONT></SPAN></P><A title="gfidisc.la-z-boy.com" href="#"> </A></body></html>