[Xymon] [xymon] too much data in powershell client reports

[Beck, Zak]

Hi Mario

The ports check is just netstat -an. I would suggest for these servers you use slimmode as you mention and then add an external script to run your own netstat command and exclude the lines for the IPs you are not interested in.

For example, you can pipe the output of netstat to findstr and use an inverse match to exclude the lines matching the expression using /v:

netstat -an | findstr /V "127.0.0.1"

Zak

From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Mario De Chenno
Sent: 25 January 2018 09:13
To: xymon at xymon.com
Subject: [External] [Xymon] [xymon] too much data in powershell client reports

Hi all.
Even after setting pretty high values for MAXMSG_CLIENT (2560) MAXMSG_STATUS (2048) i got purples from our exchange servers, mainly caused by port test being truncated after about 37000 lines.
I noticed the new slimmode options in 2.27 version, but it (AFAIK) could only cut the whole port test, preventing any network port count analysis.
Since most of the connections are between the (two) exchange servers, and are reported twice in IPV4 and IPV6 notation, could there be a way to filter the "internal" connections on the client side without sending them to xymon server?
I attach an example.

Mario

________________________________

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________

www.accenture.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20180126/d04b58db/attachment.html>