Recent posts

#91
General Support / Re: PDU SNMP Parsing
Last post by twparker - March 18, 2024, 09:07:29 PM
V returns a valid result namely the full OID value "type=Master,,voltage=121.0,current=0.000,activePower=0.000,powerFactor=1.000,energy=3.446,temperature=-1,humidity=-1

I thought the next function was stuck on the second comma because the only result I get for b is "type=Master" That led me to try this

function main(oid, name) {
  transport = $node->createSNMPTransport();
  if (transport == null) return null;
  v = transport->getValue(oid);
  z = string(v);
  x = substr(z, 13);


  h = %{};
  for (a : x->split(",")) {
    b = a->split("=");
 println(b);
    if (b->size == 2) h = b[1];
  }
    return h[name];
}


Apparently I can't change the value to a string before passing it to h.
#92
General Support / Re: Windows Even Log parser ru...
Last post by Filipp Sudanov - March 18, 2024, 06:03:02 PM
I'd guess the unit is ms, but I'll check.

And if your try policy as simple as that:
<parser checkInterval="10000" name="">
  <macros/>
  <file>*Security</file>
  <rules>
      <rule name="">
        <match repeatCount="0" repeatInterval="1">.*</match>
        <event>A</event>
        <metrics class="java.util.ArrayList"/>
        <agentAction action=""></agentAction>
      </rule>
  </rules>
</parser>

will there be any events?

Checklist of things:
- agent should have this in it's config:
SubAgent = logwatch
- template with the policy should be applied to node

#93
General Support / Re: Windows Even Log parser ru...
Last post by noel - March 18, 2024, 02:40:04 PM
I tried creating a template and added a log parser policy with the following content:
<parser checkInterval="1" name="Admin activity parser">
   <macros/>
   <file>*Security</file>
   <rules>
      <rule name="Login">
         <match repeatCount="0" repeatInterval="3600" reset="false">Emelt szintű jogkivonat:\s+Igen(?:.|\r\n)+Fióknév:\s+(\w+)</match>
         <event>VV_ADMIN_LOGON</event>
         <id>4624</id>
         <push group="1"></push>
         <agentAction action=""></agentAction>
      </rule>
   </rules>
</parser>
It didn't crash the server however it also doesn't trigger the event, I tried to:
  • reduce the checkInterval from the default 10000 to 1 (what is the unit for this?)
  • make the regex match the whole message
  • use literal \r\n and \t in the expression
I made sure that the template is applied to the node I'm testing with, and in the windows events view I can see the windows event for the login. Also I'm still running netxmsd from gdb and I can only see entries like this and nothing else when I log into an account on the client:
*D* [agent.conn.10794   ] AgentConnectionEx::onWindowsEvent(): Received event from agent at 10.255.7.114, node ID 1814
#94
General Support / mssql.ddr in agent on windows ...
Last post by MarcusH - March 18, 2024, 11:50:45 AM
Hi,

Are there any known issues with mssql driver in agent for windows server 2022?

I am migrating servers and exact same config and agent version fail on new server with error [Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified

logs from old server with windows server 2016
2024.03.18 10:34:20.066 *I* [db.drv             ] Database driver "mssql.ddr" loaded and initialized successfully
2024.03.18 10:34:20.098 *D* [db.conn            ] New DB connection opened: handle=000002538F7AD490
2024.03.18 10:34:20.098 *I* [dbquery            ] Connected to database "db1"
2024.03.18 10:34:20.113 *I* [subagents          ] Subagent "DBQUERY" (dbquery.nsm) loaded successfully (version 4.4.2)

logs from new server with windows server 2022
2024.03.18 10:40:18.546 *I* [db.drv             ] Database driver "mssql.ddr" loaded and initialized successfully
2024.03.18 10:40:18.546 *W* [dbquery            ] Cannot connect to database "db1" ([Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified)
2024.03.18 10:40:18.546 *I* [subagents          ] Subagent "DBQUERY" (dbquery.nsm) loaded successfully (version 4.4.2)

agent config:
DebugLevel = 6
LogFile = C:\NetXMS\log\log.txt
MasterServers = *.*.*.*
ConfigIncludeDir = C:\NetXMS\etc\nxagentd.conf.d
FileStore = C:\NetXMS\var
SubAgent = winperf.nsm

SubAgent = dbquery.nsm
*DBQUERY
Database = id=db1;driver=mssql.ddr;server=server;dbname=db;login=user;password=pwd

I tried latest agent version and same issue.

I have tried adding ODBC DSN same issue
#95
General Support / Re: Parsing windows event logs...
Last post by Filipp Sudanov - March 18, 2024, 09:54:05 AM
SubAgent = logwatch

is needed in agent config
#96
General Support / Re: Icon color in new console
Last post by Filipp Sudanov - March 18, 2024, 09:51:00 AM
It's a bug in the framework that we use, happens with dark Windows theme. We are working on a fix, but this might take some time. Meanwhile you can try light theme or use web ui.
#97
General Support / Re: Windows Even Log parser ru...
Last post by noel - March 18, 2024, 09:49:19 AM
Attached the full bt output. I'll also try the suggested method and get back with the results.
#98
General Support / Re: Parsing windows event logs...
Last post by Egert143 - March 18, 2024, 09:02:21 AM
Do i still need to update Agent Conf file also ?, Currently i dont see any events with dooing just the above steps.
#99
General Support / Icon color in new console
Last post by Benjamin Dill - March 18, 2024, 08:06:15 AM
Hi, the icons on the left navigation have a strange color on my systems. I tested it on two different computers and I'm pretty sure I did not make any special configuration.
I'm on Windows 11.
#100
Feature Requests / Custom actions and object tool...
Last post by Benjamin Dill - March 17, 2024, 10:18:29 PM
It would be nice to have custom actions for the user agent which runs in every user session. Especially for terminal servers an option "Logoff user session" would be helpful but I can think of many others.
These custom actions could be called then on the "User Sessions" view using a new type of Object tool.