<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>Hi David<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>Have a look in the xymon-lastcollect.txt file (which will be in C:\ by default). This file contains the core payload sent to the server on the last collect.<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>I suspect the setting has worked in as much as the client is no longer sending the data to the server – there should be no sections in the above log like this:<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>[msgs:eventlog_Application]<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>[msgs:eventlog_System]<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>And similar, depending on config.<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>I think what may be happening is that the server has old data for the msgs test and so is displaying the column (probably with a purple alert) because it is no longer receiving data.<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>I am by no means an expert on the server side. I think you can remove the old data using something like this on the server:<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal>xymon 0 "drop <server> [test]"<span style='color:blue;mso-fareast-language:EN-US'><o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>i.e.<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>xymon 0 "drop <server> msgs"<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>You might need to add NOCOLUMNS:msgs in hosts.cfg, not sure.<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'>Cheers<o:p></o:p></span></p><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='color:blue'>Zak </span><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:blue'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:blue;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US>From:</span></b><span lang=EN-US> Xymon [mailto:xymon-bounces@xymon.com] <b>On Behalf Of </b>Mills,David (HHSC Contractor)<br><b>Sent:</b> 27 December 2016 22:46<br><b>To:</b> 'xymon@xymon.com' <xymon@xymon.com><br><b>Subject:</b> [Xymon] Help turning off "msg" test with XymonPSClient.ps1<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US>All –<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><br>I’ve installed a prototype of the PowerShell client, XymonPSClient.ps1 (2.1.5), and it is successfully reporting data back to the server. However, I’m trying to eliminate all Windows event log data from being sent to the server (i.e. suppressing the “msgs” column for that client on the Xymon display).<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>According to the documentation for the xymonclient_config.xml file, the “reportevt” XML tag value controls this behavior: “reportevt … Whether to scan and report event log … 0 = no 1 = yes”. However, even after adding the necessary tags and restarting the service on the Windows client, the “msgs” column keeps coming back.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Here’s the config file:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><XymonSettings><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US> <servers>xxx.xxx.txaccess.net</servers><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US> <clientlogfile>C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\xymonclient.log</clientlogfile><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> <clientconfigfile>C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\clientconfig.cfg</clientconfigfile><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US> <clientfqdn>0</clientfqdn><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> <clientlower>1</clientlower><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> <reportevt>0</reportevt><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US></XymonSettings><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Here’s the output of the currently active configuration on the client:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>PS C:\Users\millsda\Desktop\Xymon PS Client 2.1.5> .\xymonclient.ps1 config<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>XymonPSClient config:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>XML: C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\xymonclient_config.xml<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Settable Params and values:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientbbwinmembug=1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientclass=powershell<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientlogpath=C:\Users\millsda\Desktop\Xymon PS Client 2.1.5<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientlogretain=0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientname=xxx<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> ClientProcessPriority=Normal<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientremotecfgexec=0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientsoftware=powershell<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> EnableWin32_Product=0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> EnableWin32_QuickFixEngineering=0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> EnableWMISections=0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> externaldatalocation=C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\tmp<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> externalscriptlocation=C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\ext<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> loopinterval=300<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> MaxEvents=5000<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> maxlogage=60<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> servergiflocation=/xymon/gifs/<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> serversList=xxx.xxx.txaccess.net<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> slowscanrate=72<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> wanteddisksList=3<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientconfigfile=C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\clientconfig.cfg<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientfqdn=0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientlogfile=C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\xymonclient.log<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> clientlower=1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> reportevt=0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> servers=xxx.xxx.txaccess.net<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>---<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Thx!<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New"'>~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman",serif'>David Mills<br>Systems Administrator</span><span lang=EN-US><br></span><b><i><span lang=EN-US style='font-family:"Times New Roman",serif;color:#1F33ED'>Northrop Grumman</span></i></b><span lang=EN-US style='font-family:"Times New Roman",serif'><br>(512) 595-1238 (mobile)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></body></html>