NetXMS Support Forum

Thank you!
It works fine!
nxevent is a very useful utility!!!!

Yes, I've installed netxms from source.

When I've installed netxms, i didn't use the --with-client option...Have I to re-execute the installation process with the --with-client option?
Are riskes in this operation?

Thank you

Thank You!

nxevent is avaible from command line?

I have installed version 1.2.7, and I cannot find in /usr/local/bin the nxevent utility. The following is the content of the directory:
netxmsd      nxagentd     nxapush      nxencpasswd  nxscript     nxsnmpwalk
nxaction     nxap         nxdbmgr      nxget        nxsnmpget    nxupload
nxadm        nxappget     nxdevcfg     nxmibc       nxsnmpset

If i search on filesystem, I found i found only the source code of nxevent.

Thank you again.

Hi,

i need to run a netxms action from a script, so i want to use nxaction from command line. I have Netxms installed on Debian.
My action is saved as "test_action", when executed it send a mail.
if i run from command line "nxaction netxms test_action" (where netxms is the name of the node of the Netxms Server) , I got "Error 500: Internal Error".
How can i run this action from command line?
Thank you

Hi!
On netxms, i have a node that cannot be monitored throught icmp ping. On that node, i have a dci that store the info about the status of the node and i manage the alarms depending on the value assumed by this dci.
The only problem is that appear a question mark on the icon of the node in the Object three menu; i think this is caused by the icmp polling disabled .
Is there a way to eliminate the question mark on the icon?
Thank you!

Thank you so much!

For info, is this issue (https://www.netxms.org/forum/general-support/can%27t-get-switch-forwarding-database-on-cisco-2960/msg10277/#msg10277) resolved in 1.2.8?

Ok!
It's a limit of the entire message or a limit of the characters transported by a parameter?
I mean...if I use two parameters instead one, i get 255*2 characters?
In this case, i write a regular expression that put first 255 characters in the first parameter, the second 255 characters in the second parameter and so on.

Thank you for the reply

Hi,

i have configured netxms agent for monitoring the Window Event Log and it works well; i have only one problems:

when i check the event log, i see not the entiry log message present in the Window Event Log, but only a part. For Example:

Window Event Log:
Privilegi speciali assegnati a nuovo accesso.

Soggetto:
   ID sicurezza:      **************
   Nome account:      **************
   Dominio account:   **************
   ID accesso:      0x26a1ca8ff

Privilegi:      SeSecurityPrivilege
         SeTakeOwnershipPrivilege
         SeLoadDriverPrivilege
         SeBackupPrivilege
         SeRestorePrivilege
         SeDebugPrivilege
         SeSystemEnvironmentPrivilege
         SeImpersonatePrivilege


While in Netxms i got this Message:

22.07.2013 18:17:55   3SUN-FAB-PC027   Window_Log_id_4672   Normal   ID 4672: Privilegi speciali assegnati a nuovo accesso.
Soggetto:
   ID sicurezza:      S-1-5-21-3970589341-2958000165-2541400463-500
   Nome account:      Administrator
   Dominio account:   **************
   ID accesso:      0x28c2b43cc

Privilegi:      SeSecurityPrivilege
         SeT

The Parser file is configured for save the entire message log ( I insert the line <match>(.*)</match>); In the Event Configuration, i set as Message "ID Number: %1".

if the log's message is short, there is no problem and all the lines of the messages are saved, but if the message is big, i get only a part.

In this way, in some case i can lose very important info!!!
Is there a way to increase the dimension of the log's message stored by Netxms?

Thank you!

Hi,

i have configured netxms for Window Event log monitoring and i'm able to obtain the log from the device.
Here is an example of my parser file:

<parser><file>*Security</file><rules><rule><match>(.*)</match><id>1102</id><event params="1">100007</event></rule><rule><match>(.*)</match><id>5025</id><event params="1">100007</event></rule><!-- more <rule> tags can follow --></rules></parser>

If you look at the image in attachment, i'm able to get all data present in the text area of the general tab (From "Faulting app" ..........to "...643") .
Now, i need to include in the information sent from the Window machine to Netxms the ID of the Window Event.
How can i do this?
My goal is to have an unique netxms event for the log, and in the message area of the log i put, further the data i already get, the event id of the log; generally, i don't want a netxms event for each event id I'm monitoring.

In the Window Event log, if I look in the Detail tab of an event, i see are present 2 main area:
-System
-UserData

Using the regular expression (.*) i get the info presents in UserData area, while the id of the event is stored in the System area...So,Is there a way to get the data presents in the System area?
If it's impossible get the event id from the Event Log, my idea is to pass the event id statically throught the parser file. My idea is:
instead of pass only 1 parameter in the event tag (event params="1">100007</event>), i want to pass two parameters: 1 for the data obtained from the Event log and 2 for the ID, that i insert manually in the parser file. Suppose that i want to pass the ID 4624, i expect something like: event params="1&2=4624">100007</event>
It's possible?

Thank you for the support!

Hi,

It's a Layer 2 maps, that i suppose is an automatically populated map....Now i'm trying the custom (manually built map) but i think with this type there are no problems.
Thank you!

Hi,

i'm trying the network maps and i see that are very beautiful! I have only a problem:
if i delete an object (es: a switch) or a subnet from the map, after little time the object re-appear...Is there a way to resolve this?
Thank you!

OK,

i choose to Disable SNMP for all polls for the "problematic" nodes, that are already on Netxms.
The problem is resolved, thank you so much!

Hi,

in attachment the export of the Event Log for the node.
After the 6 June the icmp ping of the node return stable, now only snmp pool don't work.
Thank you.

Hi,

i have a server running FreeNAS under monitoring on Netxms. The host is always up and i can ping it from my pc or from the server where netxms is hosted , but "node down/up" alarm arrive to me...
If i check the status of the node, i see that many time the server is in state "unknow" or "critical" but i know that this is not true because i ping successfull the node all time from the server where netxms is hosted.
Moreover, i have actived snmp on the target, sometime it respond and sometime not...Else here, if i do "snmpwalk" from the server where netxms is host i get the MIB correctly.
I try to delete and recreate the node but nothing change.
Why the server status is not correctly detected?How can i fix?
In attachment the line chart of the status.

Thank you

Hi,

I'd like to execute passive network discovery on only one device, it's possible?
i have to add to Netxms throught Network Discover all the laptops present in all my network...The laptops run Window 7, so they have ICMP ping disabled and then they cannot be discovered throught active mode of network discovered...
If i use "normal" passive network discovery, netxms try to catch info about user by catching the ARP cache and the IP routing table of all device known...The problem is  in my network there are several device(UPS) not managed by me, that use different snmp community each other...this device detect snmp wrong access and send email alarm to they owner...So if i use passive network discovery and i specify a default community, all the device that have a community different than the default will sent alarm, and panic happens
All mac address and IP info of the laptop are stored in the core switch of the network, can i limit the passive network discovery on only this device?
If i set the UPS unmanaged, when i exec the network discovery,will netxms try to access howewer the device?

Thank you,

Giovanni