[hobbit] BBWin 0.11 Centralised Config problems

[Etienne Grignon]

Hi Matthew,

2008/4/2, Matthew.Roberts at nt.gov.au <Matthew.Roberts at nt.gov.au>:
>
>  Hi All,
>
>  I need a bit of assistance in setting up BBWin0.11 with Hobbit 4.3 in
>  Centralised config mode.
>
>  My problem lies with the eventlog monitoring of my Windows hosts. When running
>  BBWin in local config mode, I can setup filtering so that only specific event
>  log types get sent to the hobbit server and displayed on the msgs page. However
>  when I configure BBWin to use a central config, I cant filter which event logs
>  get sent to the hobbit server and displayed on the msgs page. As a result my
>  msgs page is full of eventlog entries which I dont need to know about.
>
>  Below is a copy of my BBWin.cfg and the client-local.cfg on the hobbit server
>
>  <?xml version="1.0" encoding="utf-8" ?>
>  <configuration>
>  <bbwin>
...
>
>       <!-- bbwin mode local or central -->
>       <setting name="mode" value="central" />
>       <setting name="configclass" value="win32" />
>
...
>       <setting name="logreportfailure" value="false" />
>  </bbwin>
>
>
>  client-local.cfg: (dcstest2 is the name of one of my hosts I am having problems
>  with)
>
>  [dcstest2]
>  eventlog:security
>  ignore Success
>  eventlog:application
>  ignore information
>  eventlog:system
>  ignore information
>
>


You should use [win32] instead of   [dcstest2] in your
client-local.cfg because in your bbwin.cfg, the configclass is set to
win32 (<setting name="configclass" value="win32" />). Once you will do
that, BBWin, will get the rules you have set to ignore some events.



-- 
Etienne GRIGNON