David,
Do you have windows XP client monitored in central mode ?
Does those XP clients have same issue ?
BBWin is only tested in NT/2000/XP Windows OS, according to the SF
project site(R1).
tj
R1: http://sourceforge.net/projects/bbwin/
On Tue, Aug 17, 2010 at 9:14 PM, TJ Yang <user-61afc885aa73@xymon.invalid> wrote:
Thanks, David
I added your report as a bug here
https://sourceforge.net/tracker/?func=detail&aid=3047417&group_id=136450&atid=735923
tj
On Tue, Aug 17, 2010 at 6:23 PM, David Baldwin
<user-cbbf693f2c89@xymon.invalid> wrote:
TJ Yang wrote:
On Tue, Aug 17, 2010 at 4:09 AM, David Baldwin
<user-cbbf693f2c89@xymon.invalid> wrote:
This is my solution for the deficiencies of both BBNT's msgs and BBwin
(broken in central mode) windows event log reporting.
I am preparing to deploy BBWin 0.12 at work.
Would you please elaborate more how BBWin central mode msgs reporting
is broken ?
The ignore filtering and size limiting has no effect. I currently have
the following in /etc/hobbit/client-local.cfg - doesn't do anything useful.
[win32]
log:eventlog_security:10240
ignore .*
ignore .
msgs:eventlog_security:10240
ignore .*
ignore .
eventlog:security:10240
ignore Windows Filter
ignore handle
ignore .*
ignore .
eventlog:System:10240
ignore .*
ignore .
eventlog:application:10240
ignore .*
ignore .
I also have success and failure auditing turned on - which means the
event log reports can be very big. Too big for hobbitd to handle even
with MAXMSG_DATA set at values like 15242880 (i.e. 15MB), so I get
"flooding" client errors.
Also, the event log subsystem has changed in Vista and Server 2008.
Neither BBNT or BBWin seems to handle event log processing properly for
these.
Thanks, David.
--
David Baldwin - IT Unit
Australian Sports Commission www.ausport.gov.au
Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616
user-cbbf693f2c89@xymon.invalid Leverrier Street Bruce ACT 2617
Keep up to date with what's happening in Australian sport visit http://www.ausport.gov.au
This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.
--
T.J. Yang
--
T.J. Yang