NetXMS Support Forum

With the config in my first post (with <agent>)  nxagentd.exe -C  shows:

config
+- CORE
|   +- MasterServers
|   |    value: XX.XX.XX.XX
|   +- ConfigIncludeDir
|   |    value: C:\NetXMS\etc\nxagentd.conf.d
|   +- LogFile
|   |    value: {syslog}
|   +- FileStore
|   |    value: C:\NetXMS\var
|   +- SubAgent
|        value: winperf.nsm
+- agent
|   +- MasterServers
|   |    value: XX.XX.XX.XX
|   +- ConfigIncludeDir
|   |    value: C:\NetXMS\etc\nxagentd.conf.d
|   +- LogFile
|   |    value: {syslog}
|   +- FileStore
|   |    value: C:\NetXMS\var
|   +- SubAgent
|        value: logwatch.nsm
|        value: winperf.nsm
|        value: logwatch.nsm
|        value: filemgr.nsm
+- logwatch
|   +- Parser
|        value: c:\netxms\var\logwatch_win_eventlog_system_parser.xml
|        value: c:\netxms\var\logwatch_win_eventlog_application_parser.xml
|        value: c:\netxms\var\logwatch_win_eventlog_system_parser.xml
|        value: c:\netxms\var\logwatch_win_eventlog_application_parser.xml
+- filemgr
     +- RootFolder
          value: c:\

In the subagentlist of the management console only the winnt and winperf subagents are showing (see attachment, please).

I test the eventlog with:   eventcreate /T ERROR /ID 1000 /L APPLICATION /D "TestError"


Greetings
Marco

Hello Victor,

thanx for the info. Tryed the groupname as described and it workes...

Small question: Can a DCI be part of more then one Group? Can i add multiple groups in groupfild with a "," or ";" ?

Greetings
Marco

Hello Victor,

this does not help. Logwatch is still not shown in subagent list.

Greets
Marco

Hello @all,

wie use policys to deploy the agent configs. One "Master" policy:

<config>
   <agent>
      <MasterServers>XX.XX.XX.XX</MasterServers>
      <ConfigIncludeDir>C:\NetXMS\etc\nxagentd.conf.d</ConfigIncludeDir>
      <LogFile>{syslog}</LogFile>
      <FileStore>C:\NetXMS\var</FileStore>
      <SubAgent>winperf.nsm</SubAgent>
   </agent>
</config>

An one policy to get alarms from windows eventlog:

<config>
   <agent>
      <SubAgent>logwatch.nsm</SubAgent>
   </agent>
   <logwatch>
      <Parser>c:\netxms\var\logwatch_win_eventlog_system_parser.xml</Parser>
      <Parser>c:\netxms\var\logwatch_win_eventlog_application_parser.xml</Parser>
   </logwatch>
</config>


Until Agent 2.0.8 this works without problems. Since i upgraded the agents to 2.1 (64bit), the 2.1 agent is not loading the logwatch subagent.

All 2.0.8 agents have loaded the logwatch subagent and sending windows event is working.

We using NetXMS Server V2.1 64bit on Win7 64bit Host with MySQL 5.6.35 64bit.

Greetings
Marco

Hello @all,

since update from 2.0.8 to 2.1 the Grouping from perfomance tab is broken. Group field in performance in settings dialog tab only shows bracket and numbers (ex.: '##1485') and there is no button to select the group dci.

The groups in the perfomance tab are splitt in a graph for each dci.

How can i get this to work as expected? There are no errors at the upgrade from 2.0.8 to 2.1.

Using Windows 7 64-bit (German) as NetXMS Host and MySQL 5.6.35 (64bit) at the same Host as DB.


Greetings
Marco

Meanwhile i figured out that one system spams NetXMS with thousands and thousand of windows eventlog entrys.

I killed the agent on that system and restored the NetXMS database from yesterday. Now, NetXMS runs like before... :-)

Hello @all,

since yesterday i can't login into NetXMS ( V2.0.8 ). I tried to restart the service (Win7, 64bit) but the windows service console always says: starting... netxmsd.exe is always running at 24% cpu. I killed the process and check the db (nxdbmgr check), but there are no error or anything else. All checks are green.

Then i started netxms core with debug log (please see log in attachment) but there are, in my opinion, no errors or so. The last two lines are always:

[13-Mar-2017 09:23:58.177] [DEBUG] AccountStatusUpdater: wakeup
[13-Mar-2017 09:23:58.177] [DEBUG] ConfigReadStr: (cached) name=BlockInactiveUserAccounts value="0"


I don't know what i can further do... I would be grateful for any little help or advice...

Thanx.

Greets
Marco

Ok. Thanks for the Info.

Greets
Marco

Hello @all,

is there currently a way to create a graph or a line chart from a DCI summary table? I want to visualise the CPU utilization from our servers. I created a summary table but i didn't find a way to create a graph from it...

Thanx for help.

Greets
Marco

I found a solution myself. I'm using following filter script in events to filter the message text with wildcards:

if($event->message ~= "(.*)ERP Basis System(.*)") return false;
else return true;

Greets
Marco

Thanks for the reply. I understand this.

But i think that the code from above is false. Can i use "*" als wildcard in filtering code? Is the script above functional in NetXMS?

Hello @all,

i'd like to implement a filtering script in event processing:

-----
if ($event->message like "*ERP Basis System*"){
  return false; // Match rule
}
return true;
-----

Event processing should only throw a alarm, if there is NOT the text "ERP Basis System" in the message text of the event. How can/must i use wildcards in filtering scripts?

Thanks for helping me...

Greets
Marco

Hi Victor,

works perfect... thanks for the hint...

Greets
Marco

Hi Victor,

thanks for the fast reply... i will try it tomorrow...

Greets
Marco

Hello,

i'm using hier NetXMS V1.2.7 in a windows environment (NetXMS server is a Win7 machine, NetXMS Agent runs on a Win2008R2 Server). I'm having here a problem with the monitoring from the Windows server. The NetXMS Agent don't send any events to the NetXMS syslog server (syslog server is up an running...)



My agent config looks like this:
--------------------------------------------
MasterServers = 10.10.9.40
ConfigIncludeDir = C:\NetXMS\etc\nxagentd.conf.d
#LogFile = {syslog}
LogFile = c:\netxms\var\netxms.log
FileStore = C:\NetXMS\var
SubAgent = logwatch.nsm
SubAgent = winperf.nsm
DebugLevel = 9

*LOGWATCH
Parser = c:\netxms\etc\eventlog_system_parser.xml
--------------------------------------------



Logwatch Parser File:
--------------------------------------------
<parser trace="9">
  <file>*System</file>
  <rules>
    <rule>
      <match>(.*)</match>
    </rule>
  </rules>
</parser>
--------------------------------------------



With these configs i can see the following in the NetXMS Agent Log:

--------------------------------------------
[28-Apr-2015 15:45:27.877] [DEBUG] [session:0] Sending message CMD_REQUEST_COMPLETED (size 48)
[28-Apr-2015 15:45:43.492] [DEBUG] LogWatch: publisher name is Service Control Manager
[28-Apr-2015 15:45:43.492] [DEBUG] Match event: source="Service Control Manager" id=7036 level=4 text="Dienst "Software Protection" befindet sich jetzt im Status "Beendet"."
[28-Apr-2015 15:45:43.492] [DEBUG] checking rule 1 ""
[28-Apr-2015 15:45:43.492] [DEBUG]   rule has no context
[28-Apr-2015 15:45:43.492] [DEBUG]   matching against regexp (.*)
[28-Apr-2015 15:45:43.492] [DEBUG]   matched
[28-Apr-2015 15:45:43.492] [DEBUG] rule 1 "" matched
[28-Apr-2015 15:45:43.492] [DEBUG] processing stopped at rule 1 ""; result = true
[28-Apr-2015 15:45:48.250] [DEBUG] [session:0] Message dump:
--------------------------------------------

By searching for infos on Google i can take a look at other NetXMS Agent Dumps with logwatch active. At all other Dumps i can see an

SendTrap(): event ....

after the line "processing stopped at...". Where is my fault? Can anyone help me, please?


Greets
Marco

PS: By the way, thanx for this great piece of software