NetXMS Support Forum

Можно сделать external parameter на агенте с использованием команды openssl. Обсуждалось в английском форуме: https://www.netxms.org/forum/configuration/monitoring-ssl-certificate-expiry/

И еще ветку .1.3.6.1.2.1.4.20.1.1.

Нет возможности на сервере на время configuration poll для juniper поставить уровень дебага 6 и прислать строки с текстом "NetworkDeviceDriver::getInterfaces"?

Сегодня - завтра. Мы заканчиваем мелкие исправления, сразу после этого сделаем релиз.

Сейчас перепроверял код - никаких подозрительных изменений не видно. С проблемой с TB драйвером это не должно быть связано. Покажите полный walk на 1.3.6.1.2.1.2.2.1.

С этой проблемой разобрались. В 2.2.7 должно опять работать нормально (сломали именно в 2.2.5).

Hi,

I just install fresh OpenSUSE Leap 15 system and build went without errors. Could you please send me your config.log and list of installed packages? Also, what version you were trying to install?

Best regards,
Victor

Hi,

why do you think that SQL server is an issue? Could you describe your problem in more details?

Best regards,
Victor

Hi,

you should downgrade your Java to version 8 update 151. version 8u161 is known to be causing this issue.

Best regards,
Victor

Да, параметры XMPPServer и XMPPPort действительно игнорируются. Я поправлю к следующему релизу.

All polls run on a node level. It is possible to add discovery poll menu on subnet object, but all it can do is to start discovery polls on each node within subnet.
When exactly you want discovery poll hook to be called?

Best regards,
Victor

Hi,

file name doesn't matter. GUID is used to identify duplicates - if you are importing event or trap definition with same GUID server will update existing one instead of creating new element. GUIDs were added to all elements relatively recently, and older export files may not contain them. You should pay attention when importing older files without GUIDs to avoid duplicating entries.

Best regards,
Victor

Then don't use -r option, just run agent as a service. Make sure server can connect on port 4700 (agent installer should add firewall exception). You can use nxget on NetXMS server to test connection. If it returns error 408 (timeout), then it's likely firewall issue. If it is error 500 (or other 5xx) then most likely source address of incoming connection is not listed in MasterServers.

Best regards,
Victor

Hi,

then it looks like VMWare tools service is subscribed to event log and so event log service has to hold the lock on nxagentd.exe. I see two possible solutions:

1. Check if nxagentd.exe is locked, attempt to stop VMWare Tools service and retry (probably multiple times).

2. Check if nxagentd.exe is locked, rename it (should be allowed), and retry installation. Then attempt to delete backup file(s) on next upgrade or at system restart. This is universal as it is not important what exact process causing lock.

I'll try to implement one of these in 2.2.7 installer.

Best regards,
Victor

Hi,

where this certificate is located? If it is web site certificate or file on file system you can use openssl command line tool to extract it (and run it as ExternalParameter in NetXMS agent). For example, the following external parameter will extract certificate validity date for given web site:


ExternalParameterShellExec = HTTPS.CertificateExpireDate(*):echo | openssl s_client -showcerts -servername netxms.org -connect netxms.org:443 2>/dev/null | openssl x509 -inform pem -noout -enddate | cut -d = -f 2


Requesting it as

HTTPS.CertificateExpireDate(netxms.org)

will return

Sep  2 21:57:24 2018 GMT

Then you can use NXSL transformation script to convert it to UNIX timestamp:


if ($1 match "^\\s*([A-Za-z]+)\\s+([0-9]+)\s+([0-9]+):([0-9]+):([0-9]+)\s+([0-9]+)")
{
   t = new TIME();
   t->year = $6;
   t->mon = MonthFromName($1);
   t->mday = $2;
   t->hour = $3;
   t->min = $4;
   t->sec = $5;
   t->isdst = -1;
   return mktime(t);
}
else
{
   return 0; // error
}

sub MonthFromName(name)
{
   m = 0;
   for(n : %("Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"))
   {
      if (n == name)
         return m;
      m++;
   }
   return 0;  // error
}


Alternatively you can use


   return mktime(t) - time();


to get number of seconds till certificate expiration.

Best regards,
Victor

After some more testing it seems that logwatch itself is not an issue - event log service will open nxagentd.exe when there are active event log viewer with "System" log open (or any other process that reads event log via Wevt API) - but event log service will close it when reader terminates. Can you check if there are active event log viewer process or any other process that possibly reads system event log? If yes, can you close/restart those processes?

Best regards,
Victor