<HTML><BODY>
It's my experience with the BBWin client that it's the Event log part that seems to be causing the memory leak. Even when you have a decent set of ignores it still has to scan all the recent messages and on a Domain Controller or some other busy system this can be quite a large amount of messages. <BR>
<BR>
> -----Original Message-----<BR>
> From: Xymon [mailto:xymon-bounces@xymon.com] On Behalf Of David Baldwin<BR>
> Sent: 31 July 2013 00:30<BR>
> To: Henrik Størner<BR>
> Cc: <a href="mailto:xymon@xymon.com">xymon@xymon.com</a> <BR>
> Subject: Re: [Xymon] Windows Client<BR>
> <BR>
> On 31/07/13 1:17 AM, Henrik Størner wrote:<BR>
> > On 30-07-2013 16:32, Scot Kreienkamp wrote:<BR>
> >> Couldn't tell you what version of PS I was running, but it was the<BR>
> >> current one of the time. I never saw anything but a small spike<BR>
> >> reported back to Xymon, so if you're looking there you won't see<BR>
> >> them. I only saw them when I was watching the task manager on the<BR>
> >> server itself. The servers were sitting between 10-15% usage<BR>
> >> generally, and would only spike when the WinPSClient ran. This was<BR>
> >> on 2008R2 VM's on ESX4 at the time.<BR>
> ><BR>
> > My "gut feeling" is that it is the eventlog-scanning that causes many<BR>
> > of these spikes - it certainly was/is with the old BBWin client, and I<BR>
> > would suspect that WinPSClient has the same problem.<BR>
> ><BR>
> > Could be wrong - it's been quite some time since I delved into it.<BR>
> ><BR>
> The eventlog scanning was unfinished business. The Get-EventLog cmdlet is very<BR>
> basic - from memory, despite it having options like -After it would in fact scan the<BR>
> entire event log every time. Get-WinEvent is the updated version - not sure if that<BR>
> was available on 2003. I'd started looking at the .Net eventlog stuff as a<BR>
> workaround and that was more promising, but since I log ship everything to a<BR>
> central server with syslog and process it there, eventlog stuff was not a high<BR>
> priority with me.<BR>
> <BR>
> David.<BR>
> <BR>
> --<BR>
> David Baldwin - Senior Systems Administrator (Datacentres + Networks)<BR>
> Information and Communication Technology Services<BR>
> Australian Sports Commission <a href="http://ausport.gov.au" target="_blank">http://ausport.gov.au</a> <BR>
> Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616<BR>
> <a href="mailto:david.baldwin@ausport.gov.au">david.baldwin@ausport.gov.au</a> Leverrier Street Bruce ACT 2617 <BR>
> <BR>
> <BR>
> -------------------------------------------------------------------------------------<BR>
> Keep up to date with what's happening in Australian sport visit<BR>
> <a href="http://www.ausport.gov.au" target="_blank">http://www.ausport.gov.au</a> <BR>
> <BR>
> This message is intended for the addressee named and may contain confidential<BR>
> and privileged information. If you are not the intended recipient please note that<BR>
> any form of distribution, copying or use of this communication or the information<BR>
> in it is strictly prohibited and may be unlawful. If you receive this message in error,<BR>
> please delete it and notify the sender.<BR>
> -------------------------------------------------------------------------------------<BR>
> _______________________________________________<BR>
> Xymon mailing list<BR>
> <a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a> <BR>
> <a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a> <BR>
<span style="mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-bidi-font-family:
Calibri;color:black"></span><p></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Name & Registered Office:
EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company
No. 00718151.</span></p>
<p class="MsoNormal" style="border:none;mso-border-bottom-alt:solid windowtext 1.5pt;
padding:0cm;mso-padding-alt:0cm 0cm 1.0pt 0cm"><span style="font-size:9.0pt">Express
Gifts Limited is authorised and regulated by the Financial Conduct Authority</span></p>
<hr />
<p class="MsoNormal"><span style="font-size:9.0pt">NOTE: This email and any
information contained within or attached in a separate file is confidential and
intended solely for the Individual to whom it is addressed. The information or
data included is solely for the purpose indicated or previously agreed. Any
information or data included with this e-mail remains the property of Findel
PLC and the recipient will refrain from utilising the information for any
purpose other than that indicated and upon request will destroy the information
and remove it from their records. Any views or opinions presented are solely
those of the author and do not necessarily represent those of Findel PLC. If
you are not the intended recipient, be advised that you have received this
email in error and that any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. No warranties or assurances are
made in relation to the safety and content of this e-mail and any attachments.
No liability is accepted for any consequences arising from it. Findel Plc
reserves the right to monitor all e-mail communications through its internal
and external networks. If you have received this email in error please notify
our IT helpdesk on +44(0) 1254 303030</span></p>
<p class="MsoNormal"><span style="font-size:9.0pt"> </span></p>
</BODY></HTML>