[Xymon] Help turning off "msg" test with XymonPSClient.ps1
zak.beck at accenture.com
zak.beck at accenture.com
Wed Dec 28 15:04:03 CET 2016
Hi
That output is generated by a different function in the client.
Unfortunately, that function does not have the suppression.
I will submit an update to suppress that output in the next few days - I
have one or two other updates to include also.
Thanks
Zak
From: Mills,David (HHSC Contractor) [mailto:David.Mills at hhsc.state.tx.us]
Sent: 28 December 2016 13:35
To: Beck, Zak <zak.beck at accenture.com>; xymon at xymon.com
Subject: RE: Help turning off "msg" test with XymonPSClient.ps1
Zak -
Thanks so much for the reply.
Actually, this is what I am seeing in the xymon-lastcollect.txt (the file
has the correct / current timestamp for right now):
[EventlogSummary]
Max(K) Retain OverflowAction Entries Log
------ ------ -------------- ------- ---
20,480 0 OverwriteAsNeeded 78,572
Application
20,480 0 OverwriteAsNeeded 0
HardwareEvents
512 7 OverwriteOlder 0
Internet Explorer
20,480 0 OverwriteAsNeeded 0 Key
Management Service
20,480 0 OverwriteAsNeeded 27,169
Security
8,192 0 OverwriteAsNeeded 4,699
Symantec Endpoint Protection Client
20,480 0 OverwriteAsNeeded 62,965
System
15,360 0 OverwriteAsNeeded 132
Windows PowerShell
[msgs:EventlogSummary]
Max(K) Retain OverflowAction Entries Log
------ ------ -------------- ------- ---
20,480 0 OverwriteAsNeeded 78,572
Application
20,480 0 OverwriteAsNeeded 0
HardwareEvents
512 7 OverwriteOlder 0
Internet Explorer
20,480 0 OverwriteAsNeeded 0 Key
Management Service
20,480 0 OverwriteAsNeeded 27,169
Security
8,192 0 OverwriteAsNeeded 4,699
Symantec Endpoint Protection Client
20,480 0 OverwriteAsNeeded 62,965
System
15,360 0 OverwriteAsNeeded 132
Windows PowerShell
This data is actually what I see when it gets over to the Xymon server, as
viewed by clicking the "msgs" icon for details. "drop"-ping the test doesn't
do any good since the data is fresh and keeps coming from the client.
If it helps at all, the client is a Windows Server 2012 R2.
??
;-)
From: zak.beck at accenture.com <mailto:zak.beck at accenture.com>
[mailto:zak.beck at accenture.com]
Sent: Wednesday, December 28, 2016 3:08 AM
To: Mills,David (HHSC Contractor); xymon at xymon.com <mailto:xymon at xymon.com>
Subject: RE: Help turning off "msg" test with XymonPSClient.ps1
Hi David
Have a look in the xymon-lastcollect.txt file (which will be in C:\ by
default). This file contains the core payload sent to the server on the last
collect.
I suspect the setting has worked in as much as the client is no longer
sending the data to the server - there should be no sections in the above
log like this:
[msgs:eventlog_Application]
[msgs:eventlog_System]
And similar, depending on config.
I think what may be happening is that the server has old data for the msgs
test and so is displaying the column (probably with a purple alert) because
it is no longer receiving data.
I am by no means an expert on the server side. I think you can remove the
old data using something like this on the server:
xymon 0 "drop <server> [test]"
i.e.
xymon 0 "drop <server> msgs"
You might need to add NOCOLUMNS:msgs in hosts.cfg, not sure.
Cheers
Zak
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Mills,David (HHSC
Contractor)
Sent: 27 December 2016 22:46
To: 'xymon at xymon.com' <xymon at xymon.com <mailto:xymon at xymon.com> >
Subject: [Xymon] Help turning off "msg" test with XymonPSClient.ps1
All -
I've installed a prototype of the PowerShell client, XymonPSClient.ps1
(2.1.5), and it is successfully reporting data back to the server. However,
I'm trying to eliminate all Windows event log data from being sent to the
server (i.e. suppressing the "msgs" column for that client on the Xymon
display).
According to the documentation for the xymonclient_config.xml file, the
"reportevt" XML tag value controls this behavior: "reportevt . Whether to
scan and report event log . 0 = no 1 = yes". However, even after adding the
necessary tags and restarting the service on the Windows client, the "msgs"
column keeps coming back.
Here's the config file:
<XymonSettings>
<servers>xxx.xxx.txaccess.net</servers>
<clientlogfile>C:\Users\millsda\Desktop\Xymon PS Client
2.1.5\xymonclient.log</clientlogfile>
<clientconfigfile>C:\Users\millsda\Desktop\Xymon PS Client
2.1.5\clientconfig.cfg</clientconfigfile>
<clientfqdn>0</clientfqdn>
<clientlower>1</clientlower>
<reportevt>0</reportevt>
</XymonSettings>
Here's the output of the currently active configuration on the client:
PS C:\Users\millsda\Desktop\Xymon PS Client 2.1.5> .\xymonclient.ps1 config
XymonPSClient config:
XML: C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\xymonclient_config.xml
Settable Params and values:
clientbbwinmembug=1
clientclass=powershell
clientlogpath=C:\Users\millsda\Desktop\Xymon PS Client 2.1.5
clientlogretain=0
clientname=xxx
ClientProcessPriority=Normal
clientremotecfgexec=0
clientsoftware=powershell
EnableWin32_Product=0
EnableWin32_QuickFixEngineering=0
EnableWMISections=0
externaldatalocation=C:\Users\millsda\Desktop\Xymon PS Client 2.1.5\tmp
externalscriptlocation=C:\Users\millsda\Desktop\Xymon PS Client
2.1.5\ext
loopinterval=300
MaxEvents=5000
maxlogage=60
servergiflocation=/xymon/gifs/
serversList=xxx.xxx.txaccess.net
slowscanrate=72
wanteddisksList=3
clientconfigfile=C:\Users\millsda\Desktop\Xymon PS Client
2.1.5\clientconfig.cfg
clientfqdn=0
clientlogfile=C:\Users\millsda\Desktop\Xymon PS Client
2.1.5\xymonclient.log
clientlower=1
reportevt=0
servers=xxx.xxx.txaccess.net
---
Thx!
~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~
David Mills
Systems Administrator
Northrop Grumman
(512) 595-1238 (mobile)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20161228/75cf5e61/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6831 bytes
Desc: not available
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20161228/75cf5e61/attachment.bin>
More information about the Xymon
mailing list