MSGS from BBWin client goes purple

Well, I surely can't count on my fingers how many events are generated every minute. But I can say it gets close to 200 security events per second. What would result in something about 360k events every 30 minutes.

Hobbit client shouldn't analyze these events and return to the server only the matching ones?

Thank you.

Ricardo Alberto Schütz - Consultor

--------------------------------------------

Redix - Gestão em T.I. com Software Livre

http://www.redix.com.br - user-5105202f6a95@xymon.invalid

Tel. Coml.: +55 (47) 3323-7313

Tel. Cel.: +55 (47) 9186-9868

--------------------------------------------

Etienne Grignon wrote:

Hello,



2008/4/22, Ricardo Alberto Schutz :

  

Can someone help on this?



 We are having some trouble with BBWin. Our linux clients are configured in

central mode, so all the configuration is made on the server. Now we have to

watch some Windows clients, which are configured in local mode.



 The problem is with the "msgs". One specific client goes purple sometimes.

But not the entire host, only msgs column. Procs, disk, memory, svcs and etc

are all green, only msgs column goes purple.



 My BBWin.cfg is as follows



      

   ...

         ...

         

   

   ...

     ...

     ...

     ...

     ...

                       

   

     ...

      ...

     ...

  



 Is there something wrong with the configuration? How can I find out why is

it going purple? There's no "Client data" avaliable, maybe because it's

running in "local mode"?



    

The problem may be that there are too many events in your event log,

so it takes too much time to get the last 30 minutes events to be sent

to hobbit.



Could you check how many events are generated in your event log every minute ?



Regards,