Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - stoffmann

#1
Thank You very much. I really appreciate the comprehensive explanation.
#2
Hi,
maybe someone can give me some advice for this problem.
I have several Azure AVDs I' monitoring with NetXMS, which in general is working fine.
We use FSLogiix to manage the user profiles, which is Microsoft's recommended way.
FSLogix stores the profile in VHDX file (Hard drive image) which is then mounted when the user logs on
and dismounted on logoff. And here is my problem.

NetXMS recognizes when a drive gets mounted or dismounted, which in general is a good thing.
I my case it results in a crazy high number of DCIs (see screenshot), some active some disabled.

Is there a way to avoid this? I only want to monitor the fixed drives of the server.

Also, why is it showing a Template with the same name as the host for this DCIs?

Thanks for Your help
#3
That worked. Thank You!
#4
I try to monitor some events in the Microsoft-Windows-TaskScheduler%4Operational.evtx log
to get notified when scheduled tasks failed.

My parser config is:



I try to monitor some events in the Microsoft-Windows-TaskScheduler%4Operational.evtx log
to get notified when scheduled tasks failed.

My parser config is:


[color=#cccccc][size=2][font=Consolas, Courier New, monospace][color=#808080]<[/color][color=#569cd6]parser[/color][color=#808080]>[/color]
[color=#cccccc]    [/color][color=#808080]<[/color][color=#569cd6]file[/color][color=#808080]>[/color][color=#cccccc]*Application[/color][color=#808080]</[/color][color=#569cd6]file[/color][color=#808080]>[/color]
[color=#cccccc]    [/color][color=#808080]<[/color][color=#569cd6]file[/color][color=#808080]>[/color][color=#cccccc]*System[/color][color=#808080]</[/color][color=#569cd6]file[/color][color=#808080]>[/color]
[color=#cccccc]    [/color][color=#808080]<[/color][color=#569cd6]file[/color][color=#808080]>[/color]
[color=#cccccc]        *Microsoft-Windows-TaskScheduler%4Operational[/color][color=#808080]</[/color][color=#569cd6]file[/color][color=#808080]>[/color]
[color=#cccccc]    [/color][color=#808080]<[/color][color=#569cd6]rules[/color][color=#808080]>[/color]
[color=#cccccc]        [/color][color=#808080]<[/color][color=#569cd6]rule[/color][color=#808080]>[/color]
[color=#cccccc]            [/color][color=#808080]<[/color][color=#569cd6]id[/color][color=#808080]>[/color][color=#cccccc]101-104[/color][color=#808080]</[/color][color=#569cd6]id[/color][color=#808080]>[/color]
[color=#cccccc]            [/color][color=#808080]<[/color][color=#569cd6]match[/color][color=#808080]>[/color][color=#cccccc].*[/color][color=#808080]</[/color][color=#569cd6]match[/color][color=#808080]>[/color]
[color=#cccccc]            [/color][color=#808080]<[/color][color=#569cd6]event[/color] [color=#9cdcfe]params[/color][color=#cccccc]=[/color][color=#ce9178]"1"[/color][color=#808080]>[/color][color=#cccccc]100086[/color][color=#808080]</[/color][color=#569cd6]event[/color][color=#808080]>[/color]
[color=#cccccc]        [/color][color=#808080]</[/color][color=#569cd6]rule[/color][color=#808080]>[/color]
[color=#cccccc]        [/color][color=#808080]<[/color][color=#569cd6]rule[/color][color=#808080]>[/color]
[color=#cccccc]            [/color][color=#808080]<[/color][color=#569cd6]id[/color][color=#808080]>[/color][color=#cccccc]202[/color][color=#808080]</[/color][color=#569cd6]id[/color][color=#808080]>[/color]
[color=#cccccc]            [/color][color=#808080]<[/color][color=#569cd6]match[/color][color=#808080]>[/color][color=#cccccc] .*[/color][color=#808080]</[/color][color=#569cd6]match[/color][color=#808080]>[/color]
[color=#cccccc]            [/color][color=#808080]<[/color][color=#569cd6]event[/color] [color=#9cdcfe]params[/color][color=#cccccc]=[/color][color=#ce9178]"1"[/color][color=#808080]>[/color][color=#cccccc]100086[/color][color=#808080]</[/color][color=#569cd6]event[/color][color=#808080]>[/color]
[color=#cccccc]        [/color][color=#808080]</[/color][color=#569cd6]rule[/color][color=#808080]>[/color]
[color=#cccccc]    [/color][color=#808080]</[/color][color=#569cd6]rules[/color][color=#808080]>[/color]
[color=#808080]</[/color][color=#569cd6]parser[/color][color=#808080]>[/color][/font][/size][/color]


In the Agent debug log (Level 7) I find the following entry which looks like it's the reason taht I don't get an event in NetXMS. Especially the last line where it says "The specified channel could not be found."

[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:44.860 *D* [logwatch          ] Registered parser for file "*Application" (GUID = 00000000-0000-0000-0000-000000000000)[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:44.860 *D* [logwatch          ] Process RSS after parser creation is 20897792 bytes[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:44.860 *D* [logwatch          ] Registered parser for file "*System" (GUID = 00000000-0000-0000-0000-000000000000)[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:44.860 *D* [logwatch          ] Process RSS after parser creation is 20897792 bytes[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:44.860 *D* [logwatch          ] Registered parser for file "*Microsoft-Windows-TaskScheduler%4Operational" (GUID = 00000000-0000-0000-0000-000000000000)[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:44.860 *D* [logwatch          ] Process RSS after parser creation is 20897792 bytes[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:44.860 *D* [logwatch          ] AddLogwatchPolicyFiles(): Log parser policy directory: C:\WINDOWS\system32\config\systemprofile\AppData\Local\nxagentd\logparser_ap\[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:44.860 *D* [logwatch          ] Start watching event log "Application"[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:45.080 *D* [logwatch          ] Start watching event log "System"[/font][/size][/color]
[color=#808080][size=2][font=Consolas, Courier New, monospace]2025.08.29 10:36:45.287 *D* [logwatch          ] Unable to open event log "Microsoft-Windows-TaskScheduler%4Operational" with EvtSubscribe(): The specified channel could not be found.[/font][/size][/color]



Any idea what the reason could be?
#5
Running it as system now shows the usernames in the Process View. But why doesn't it work with an administrative account?
#6
We have the agent running with a domain account, that is member of the Administrators group.
#7
In process view the column user is almost empty.


Only BUILTIN\Administrators shows up for some processes.
#8
Do You need more information to solve this? Please let me know.

Regards

Stefan
#9
I tried. It's also not working. Always returning 0.

In logfile with Loglevel 7 I find:

2025.06.23 09:08:32.521 *D* [comm.cs.1          ] Requesting metric "Process.CountEx("EB_BPM.exe",,"z004abcd")"
2025.06.23 09:08:32.555 *D* [comm.cs.1          ] GetMetricValue("Process.CountEx("EB_BPM.exe",,"z004abcd")"): 0 (SUCCESS) value = "0"

But the process is running.
#10
Hi,
I have to monitor if a process is running under a specific user in Windows.

I use Process.CountEx for doing that.

In Taskmanager the username is shown like AD001\z004abcd
Processname is EB_BPM.exe

I tried: Process.CountEx("EB_BPM.exe",,"AD001\z004abcd")
and ( in case the Backslash is the problem):  Process.CountEx("EB_BPM.exe",,"(?i)z004abcd")

Both fail.
Using just  Process.CountEx("EB_BPM.exe") works, but I need to have the username.


Using  NetXMS 5.2.1
Any idea?

Stefan
#11
General Support / Re: Favicon for Webinterface
May 27, 2025, 03:49:52 PM
Perfect! Thank You.
#12
General Support / Favicon for Webinterface
May 27, 2025, 09:00:08 AM
Hi,
we are using the Web interface (windows installer) Version 5.2.1 to connect to our NetXMS.
To avoid accidentely closing the browser, we use the edge (chrome) functionality to install the NetXMS site
as app which is working nice.
You have the NetXMS interface directly available in the taskbar or as a desktop shortcut.
The only downside is that the Web interface has no Favicon defined, which would be used as icon for the app.
At the moment, in the taskbar we just have a generic letter representing NetXMS.
Is it possible to configure a favicon for the webinterface somehow?

Regards

Stefan
#13
Hi,

I have the HTTPS:// in the custom attribute.
See attached screenshots.
#14
I use the new desktop client and the WebUI.
AS is Windows 11 when using WebUI or Windows Server 2022 when using Desktop Client.
Both NetXMS Clients are version 5.2.1.

#15
I think I must doing something wrong using the custom attributes for tools.
What I did:

1. Create a custom attribute
Name: AzureVM
Value: https://portal.azure.com/#home

2. Create a new menu entry in Object Tools
Type: URL
Name: Open Azure
URL: %{AzureVM}

Selecting this in the tools menu on the node I set the custom attribute results in opening File Explorer.

Any thoughts?

Best regards

Stefan