Windows service monitoring
list Neil Simmonds
Hi all, We are monitoring various Windows services using BBWin 0.12 in central mode reporting to a Xymon 4.3.4 server. In the analysis.cfg file for a number of servers we have the following type of entry, SVC SQLSERVERAGENT status=started startup=automatic As far as I can see from the analysis.cfg help that is exactly the correct format, however when this flags red, we get the following message, SQLSERVERAGENT is started/automatic - want started/automatic When I look down the list of processes SQLSERVERAGENT is clearly shown as stopped, SQLSERVERAGENT automatic stopped SQLSERVERAGENT Does anyone have any idea why the message is incorrect and if there is a way to fix it? Regards, Neil Simmonds Operation Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: user-8188d25e65e4@xymon.invalid Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030
list Neil Simmonds
Hi all, We are monitoring various Windows services using BBWin 0.12 in central mode reporting to a Xymon 4.3.4 server. In the analysis.cfg file for a number of servers we have the following type of entry, SVC SQLSERVERAGENT status=started startup=automatic As far as I can see from the analysis.cfg help that is exactly the correct format, however when this flags red, we get the following message, SQLSERVERAGENT is started/automatic - want started/automatic When I look down the list of processes SQLSERVERAGENT is clearly shown as stopped, SQLSERVERAGENT automatic stopped SQLSERVERAGENT Does anyone have any idea why the message is incorrect and if there is a way to fix it? Regards, Neil Simmonds Operation Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: user-8188d25e65e4@xymon.invalid Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030
list Jamison Maxwell
I've dropped Xymon into a couple of places I've worked and have always had weird problems monitoring Windows in central. Considering you can edit the conf files by specifying the UNC path, I have always broken down and done the configuration on the clients themselves. I know that that is not the answer you're looking for, but I've noticed you've posted the same question a few times without many answers back..... Jamison Maxwell user-87d336c3dce6@xymon.invalid<mailto:user-87d336c3dce6@xymon.invalid>
▸
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Neil Simmonds
Sent: Thursday, April 26, 2012 3:17 AM
To: xymon at xymon.com
Subject: [Xymon] Windows service monitoring
Hi all,
We are monitoring various Windows services using BBWin 0.12 in central mode reporting to a Xymon 4.3.4 server.
In the analysis.cfg file for a number of servers we have the following type of entry,
SVC SQLSERVERAGENT status=started startup=automatic
As far as I can see from the analysis.cfg help that is exactly the correct format, however when this flags red, we get the following message,
SQLSERVERAGENT is started/automatic - want started/automatic
When I look down the list of processes SQLSERVERAGENT is clearly shown as stopped,
SQLSERVERAGENT automatic stopped SQLSERVERAGENT
Does anyone have any idea why the message is incorrect and if there is a way to fix it?
Regards,
Neil Simmonds
Operation Analyst (Operations Support Group)
Express Gifts Limited
Express House
Clayton Business Park
Accrington
Lancashire
BB5 5JY
T: 01254 303092 | E: user-8188d25e65e4@xymon.invalid<mailto:user-8188d25e65e4@xymon.invalid>
▸
Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151.
Express Gifts Limited is authorised and regulated by the Financial Services Authority
NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030
list Neil Simmonds
Thanks for the reply Jamison. You're quite right that I've asked the question before and I'm still hoping that one day someone (maybe me) will find the answer. It seems to me that this is a Xymon server issue to do with the way it handles the SVCS data from Windows clients. I've done some more testing and if I use the values "status=started startup=automatic" then I get the problem already shown. If I use "startup=automatic status=started" then I get the opposite, in that I get a message saying "SQLSERVERAGENT is stopped/automatic - want started/automatic" even when it is started and the icon is green. If I change it to just use status=started and forget about the startup type then I get "AdobeARMservice is started/automatic - want started/Any" whether it is red or green. It would appear that the Xymon server is correctly interpreting the results but not displaying the message correctly. Unfortunately, I'm a stubborn bugger so won't give in and change to local mode unless I absolutely have to. I'm already thinking about hiding the 'svcs' column and creating a server side script to handle the client data then write to a new column called 'services'. I reckon I could have that up and running within a week and even use the existing analysis.cfg data to find the services to check as I could use grep to pull that out. I'd still rather have a system that handles it as it should rather than using workarounds that are non-standard for our installation. Regards, Neil. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jamison Maxwell Sent: 27 April 2012 03:37 To: xymon at xymon.com Subject: Re: [Xymon] Windows service monitoring
▸
I've dropped Xymon into a couple of places I've worked and have always
had weird problems monitoring Windows in central. Considering you can
edit the conf files by specifying the UNC path, I have always broken
down and done the configuration on the clients themselves. I know that
that is not the answer you're looking for, but I've noticed you've
posted the same question a few times without many answers back.....
Jamison Maxwell
user-87d336c3dce6@xymon.invalid
▸
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf
Of Neil Simmonds
Sent: Thursday, April 26, 2012 3:17 AM
To: xymon at xymon.com
Subject: [Xymon] Windows service monitoring
Hi all,
We are monitoring various Windows services using BBWin 0.12 in central
mode reporting to a Xymon 4.3.4 server.
In the analysis.cfg file for a number of servers we have the following
type of entry,
SVC SQLSERVERAGENT status=started startup=automatic
As far as I can see from the analysis.cfg help that is exactly the
correct format, however when this flags red, we get the following
message,
SQLSERVERAGENT is started/automatic - want started/automatic
When I look down the list of processes SQLSERVERAGENT is clearly shown
as stopped,
SQLSERVERAGENT automatic stopped
SQLSERVERAGENT
Does anyone have any idea why the message is incorrect and if there is a
way to fix it?
Regards,
Neil Simmonds
Operation Analyst (Operations Support Group)
Express Gifts Limited
Express House
Clayton Business Park
Accrington
Lancashire
BB5 5JY
T: 01254 303092 | E: user-8188d25e65e4@xymon.invalid
Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE,
CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151.
Express Gifts Limited is authorised and regulated by the Financial
Services Authority
NOTE: This email and any information contained within or attached in a
separate file is confidential and intended solely for the Individual to
whom it is addressed. The information or data included is solely for the
purpose indicated or previously agreed. Any information or data included
with this e-mail remains the property of Findel PLC and the recipient
will refrain from utilising the information for any purpose other than
that indicated and upon request will destroy the information and remove
it from their records. Any views or opinions presented are solely those
of the author and do not necessarily represent those of Findel PLC. If
you are not the intended recipient, be advised that you have received
this email in error and that any use, dissemination, forwarding,
printing, or copying of this email is strictly prohibited. No warranties
or assurances are made in relation to the safety and content of this
e-mail and any attachments. No liability is accepted for any
consequences arising from it. Findel Plc reserves the right to monitor
all e-mail communications through its internal and external networks. If
you have received this email in error please notify our IT helpdesk on
+44(0) 1254 303030
Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151.
Express Gifts Limited is authorised and regulated by the Financial Services Authority
NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the
Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any
information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the
information for any purpose other than that indicated and upon request will destroy the information and remove it from their records.
Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not
the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing,
or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this
e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor
all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT
helpdesk on +44(0) 1254 303030
list Neil Simmonds
Is there any possibility of getting the reporting of Windows service stares fixed. Looking at the svsc page on Xymon, BBWin is correctly reporting the current state of the agent in the [svcs] data but Xymon is (although correctly flagging it) reporting it incorrectly in the message. As can be seen below, the Startup Type is Automatic and the Status is Stopped but Xymon reports AdobeARMservice is started/automatic. This is causing us issues in that on-call personnel aren't always aware of this discrepancy and have left these alerts until morning assuming it's a Xymon issue. This is when running the BBWin agent in central mode so all the service checking is being done by Xymon, the agent is merely supplying the data to be checked. red AdobeARMservice is started/automatic - want started/Any Name StartupType Status DisplayName AdobeARMservice automatic stopped Adobe Acrobat Update Service AdobeFlashPlayerUpdateSvc manual stopped Adobe Flash Player Update Service AeLookupSvc manual started Application Experience ALG manual stopped Application Layer Gateway Service
▸
Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151.
Express Gifts Limited is authorised and regulated by the Financial Services Authority
NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030