Xymon Mailing List Archive search

Windows server loads reported high by PowerShell client

list Zak Beck
Thu, 23 Apr 2015 07:37:55 +0000
Message-Id: <user-320074808c9a@xymon.invalid>

Hi Colin

If I remember correctly, this is a server issue and was fixed in 4.3.19.

If you can't upgrade, you can fix it by setting the client name to bbwin in 
xymonclient_config.xml.

Thanks

Zak

-----Original Message-----
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Colin Coe
Sent: 23 April 2015 05:06
To: user-a23a3b28d7cd@xymon.invalid; xymon at xymon.com
Subject: Re: [Xymon] Windows server loads reported high by PowerShell client

Hi Martin

Many thanks, you're right.  Wrong syntax...

On a related note, I see in the PS client a [netstat] test but this test has
gone purple on th server I've changed from BBwin.

Have you seen this?

Thanks

CC

On Thu, Apr 23, 2015 at 11:54 AM,  <user-a23a3b28d7cd@xymon.invalid> wrote:
Hi Colin,

Yes, I had the same problem.  I believe the issue is related to the
PowerShell client not using the CLASS=Win32 in analysis.cfg.   I think a
recent update to the PS client has addressed that issue, but I haven't
look into it yet.

Hence I just state the LOAD 80 90 in each PS client server in analysis.cfg.
Eg.

HOST=PRDxxxx01
        LOAD 80 90


From:        Colin Coe <user-5b250cd7a540@xymon.invalid>
To:        "xymon at xymon.com" <xymon at xymon.com>,
Date:        23/04/2015 01:42 PM
Subject:        [Xymon] Windows server loads reported high by PowerShell
client
Sent by:        "Xymon" <xymon-bounces at xymon.com>


Hi all

I'm testing the new PowerShell client.

I'm seeing Windows nodes with loads of above 5% being reported as high
use such as the below.

---
Thu 23 Apr 11:32:18 2015 up: 0 days, 1 users, 63 procs, load=6.2%

Load is HIGH

CPU states:
total 6.2%
cores: 1

CPU     PID   Image Name                      Pri  Time     MemUsage
2.3%    1676  SVC:MSSQL$MICROSOFT##WID        8    00:04:17 101200k
0.8%    796   SVC:Appinfo/BITS/CertPropSvc/D  8    00:01:13 44244k
0.7%    748   SVC:Dhcp/EventLog/lmhosts/Wcms  8    00:00:51 16184k
0.6%    2176  WmiPrvSE                        8    00:00:24 32676k
0.6%    1648  powershell                      8    00:01:07 86344k
0.3%    1540  WmiPrvSE                        8    00:00:24 23288k
0.2%    1768  SVC:RHEV-Agent                  8    00:00:34 21496k
0.2%    1088  RMClient                        8    00:00:29 191220k
0.2%    3792  ServerManager                   8    00:00:13 106148k
0.1%    2952  WmiPrvSE                        8    00:00:10 8656k
0.1%    504   services                        9    00:00:07 7640k
0.0%    4     System                          8    00:00:09 264k
0.0%    3116  SVC:gupdate                     8    00:00:00 9412k
0.0%    2812  WmiPrvSE                        8    00:00:00 10208k
0.0%    1388  SVC:TermService                 8    00:00:04 65560k
0.0%    600   SVC:RpcEptMapper/RpcSs          8    00:00:01 6800k
0.0%    3560  WmiPrvSE                        8    00:00:00 5196k
0.0%    512   SVC:KeyIso/Netlogon/SamSs       9    00:00:04 13348k
0.0%    1692  SVC:wmiApSrv                    8    00:00:00 5020k
0.0%    1628  conhost                         8    00:00:00 2720k
0.0%    2072  SVC:RDMS/TScPubRPC              8    00:00:00 10748k
0.0%    3308  SVC:RPCHTTPLBS                  8    00:00:00 3024k
0.0%    552   SVC:BFE/DPS/MpsSvc              8    00:00:00 9892k
0.0%    3832  GoogleUpdate                    4    00:00:00 2440k
0.0%    352   csrss                           13   00:00:01 3732k
0.0%    3096  rdpclip                         8    00:00:00 6376k
0.0%    4064  GoogleUpdate                    4    00:00:00 8780k
0.0%    3720  iashost                         8    00:00:00 11352k
0.0%    3776  SVC:TSGateway                   8    00:00:00 13508k
0.0%    2092  SVC:Tssdis                      8    00:00:00 11016k
0.0%    4068  VCDDaemon                       8    00:00:00 5572k
0.0%    2800  dwm                             13   00:00:01 39200k
0.0%    2688  SVC:MSDTC                       8    00:00:00 6616k
0.0%    3088  taskhostex                      8    00:00:00 6400k
0.0%    3292  explorer                        8    00:00:07 89732k
0.0%    2324  SVC:COMSysApp                   8    00:00:00 9872k
0.0%    3464  ClassicStartMenu                8    00:00:00 8028k
0.0%    2432  taskeng                         6    00:00:00 4372k
0.0%    2376  SVC:PolicyAgent                 8    00:00:00 4284k
0.0%    1820  vdagent                         13   00:00:00 3768k
0.0%    712   dwm                             13   00:00:00 29124k
0.0%    696   LogonUI                         13   00:00:00 26172k
0.0%    724   SVC:vdservice                   10   00:00:00 2712k
0.0%    928   SVC:CryptSvc/Dnscache/LanmanWo  8    00:00:00 16628k
0.0%    828   SVC:EventSystem/FontCache/netp  8    00:00:00 11656k
0.0%    568   SVC:BrokerInfrastructure/DcomL  8    00:00:00 10220k
0.0%    208   smss                            11   00:00:00 992k
0.0%    0     Idle                            0             4k
0.0%    404   csrss                           13   00:00:00 3272k
0.0%    440   winlogon                        13   00:00:00 5268k
0.0%    412   wininit                         13   00:00:00 3496k
0.0%    1072  SVC:Spooler                     8    00:00:00 10496k
0.0%    1440  SVC:WIDWriter                   8    00:00:00 5492k
0.0%    1424  SVC:W3SVC/WAS                   8    00:00:00 8352k
0.0%    1576  SVC:XymonPSClient               8    00:00:00 3888k
0.0%    1736  winlogon                        13   00:00:00 5196k
0.0%    1732  csrss                           13   00:00:00 19372k
0.0%    1368  SVC:ScDeviceEnum/SysMain/TrkWk  8    00:00:04 11180k
0.0%    1124  SVC:IISADMIN                    8    00:00:00 15408k
0.0%    1100  SVC:AppHostSvc                  8    00:00:00 7252k
0.0%    1164  SVC:KPSSVC                      8    00:00:00 3020k
0.0%    1280  SVC:QEMU-GA                     8    00:00:00 5060k
0.0%    1208  SVC:QEMU Guest Agent VSS Provi  8    00:00:00 5292k
---

I've got the following in /etc/xymon/analysis.cfg
---
CLASS=powershell
   LOAD=80 90
---

and in /etc/xymon/client-local.cfg
---
[powershell]
eventlog:security
ignore success
ignore Success
ignore "The local computer may not have the necessary registry
information or message DLL files to display messages from a remote
computer"
eventlog:system
ignore "Contact the administrator to install the driver before you log
in again"
adreplicationcheck
terminalservicessessions:10:15
---

Any ideas how I can get the thresholds in the analysis file to be honored?