Repeated updates of the software inventory since version 6.0.0 of Win Agent

Started by batnator, March 06, 2026, 07:04:13 AM

Previous topic - Next topic

batnator

Since version 6.0.0 of the Windows Agent, the software inventory is updated every time a user logs on to the client and then again when they log off.

The only difference in the list of installed software is that when a user is logged on, the user's name is displayed in the "User" column for many entries; when no user is logged on, this column is empty.

This behavior results in a large number of "SYS_PACKAGE_REMOVED" and "SYS_PACKAGE_INSTALLED" events.

Is this intended behavior?

Filipp Sudanov

Replicates for me, created ticket: https://github.com/netxms/netxms/issues/3137
You may keep 5.x agent on your systems for now, agent can be older then the server.

sqk

Downgrade from 6.0.4 to 5.2.8 x64 agent (using deploy package) results in "Problem with agent local database: could not open database" major event for me...

Filipp Sudanov

yes, because newer agent updated schema of agent database and we don't have automation for agent downgrade with that. Just delete nxagentd.db file, it will be recreated on agent start.

sqk

Found db file in %WINDIR%\System32\config\systemprofile\AppData\Local\nxagentd folder, but need enter maintenance, connect to system, stop agent, delete db file, install 5.2.8, start agent and leave maintenance for every win system... will wait for fix! :-)

Thanks anyway, I like netxms since version 0.2.27...

sqk

Agent version 6.0.5 does not fix...

johnnyva

Is there a fix for this?  I think this is happening to me on Windows Agent v6.0.5.

Filipp Sudanov


batnator


Alwin

Hi Filipp,

unfortunately, we cannot confirm that this fix works.
We have been experiencing this behavior since updating the NetXMS Agent from 5.0.8 to 6.1.1. Is there a setting to disable these messages during user logins?

We have also noticed that the system is now detecting more non-essential installed software, which is flooding our alarm browser.  For example:

CapturePicker 10.0.17763.1 was installed
Hello-Setup 10.0.19585.1001 was installed
File Explorer 10.0.17763.1 was installed

Is there perhaps also a way to hide specific notifications?

Thanks for your help  :)

Alex Kirhenshtein

You can silence these alarms by disabling rules for events SYS_PACKAGE_INSTALLED and SYS_PACKAGE_REMOVED.

I've reopened issue, so devs will look into it.

Alwin

Hi Alex,

this would disable all package changes - including the system alerts that we need to monitor. We are waiting for the development team and hope for a solution. Thank you for reopen the case!