Quantcast
Channel: Zenoss Community : Popular Discussions - zenoss-windows
Viewing all 155 articles
Browse latest View live

How Do I Monitor Windows Services Without SNMP Informant?

$
0
0
I am using Zenoss Core and have WindowsWMIDeviceTemplateV2 ZenPack installed.

I would like to start monitoring certain Windows Services. I created the services in the WinService container, and set monitoring to "true".

When I click any of my windows servers, it does not show any WinServices running on the machine. I am assuming this is because SNMP Informant is not running? Installing it is not an option, but I need to be able to monitor certain Windows Services.

How can I do this?

I basically did the same thing for OS Processes and it worked successfully, but I'm having trouble with Services.

Also if it makes a difference, I have no zWinUser/zWinPassword set up on the zProperties tab of my servers, and if possible would like to keep it this way.

edit: looks like I had zWMIMonitorIgnore set to true. Changing to false and remodeling the server brough the WinService tab back, and I can add the services as needed.

Unable to connect to WMI issue

$
0
0

Hi, all ... I've been unable to connect via WMI to any of our Windows servers.  They're all VMs, running 2008R2.  I've gone through all of the postings and guides I can find here on the site, with no luck.

 

My desired end-state is not to have to use a userid with admin rights, but just to spiral in and get it working, i've added a user with domain level administrator rights.  I avoided any special characters in the password, and I know the password I'm using is correct, because I can RDP into the server I'm attempting to access using those credentials.  But no form of wmic command is successful (various quoting, using \\ instead of /, using full domain name in place of shortname, etc.).

 

On the Zenoss box, I always get the following errors:

 

[librpc/rpc/dcerpc_util.c:1290:dcerpc_pipe_auth_recv()] Failed to bind to uuid 4d9f4ab8-7d1c-11cf-861e-0020af6e7c57 - NT_STATUS_NET_WRITE_FAULT

[librpc/rpc/dcerpc_connect.c:790:dcerpc_pipe_connect_b_recv()] failed NT status (c0000022) in dcerpc_pipe_connect_b_recv

[wmi/wmic.c:196:main()] ERROR: Login to remote object.

NTSTATUS: NT_STATUS_ACCESS_DENIED - Access denied

 

On the Windows side, I always see a "bad userid or password" error - even though I'm using the exact same userid/password as used for an interactive login over RDP, e.g.

 

We're operating in a secured environment, and in the past, have run into problems with e.g. LDAP calls failing, because of the GPO settings that require certain things of any processes attempting to connect ... is there anything that anyone's encountered at the network connection level that could be in play? 

 

On the other hand -- by doing this several times in a row, the account I'm trying to use does in fact get locked -- which might argue that the connection isn't being completely denied, since it's clearly getting to the point of passing the credentials over the connection.

 

To eliminate something with the domain being involved, I created an account local to the Windows server, with local administrator rights -- same behavior.

 

I'm assuming it's not something to do with DCOM permissions or such - since the error doesn't seem to target that.

 

So ... assuming that I'm correct, and that I'm not simply messing up the password (which again, I'm using on that same server to login via RDP at the exact same time)  ... is there anything else anyone is aware of that can cause a "bad userid or password" error on the windows side?

 

Any other thoughts?

 

thx!

Zenoss UPS email notification

$
0
0

Hi All,

 

May i know if power dip or UPS in battery mode, Zenoss will send email alert to my mailbox??? I trying to find where the setting but really no idea.

monitoring windows processes

$
0
0

I know by default WMI under zenoss monitores services. I was wondering how do I get zenoss to monitor the running process. I am trying to get CPU/memory for each process running on the servers.

 

Thanks,

 

Keith

Core 4.2.3

Unable to connect to WMI issue

$
0
0

Hi, all ... I've been unable to connect via WMI to any of our Windows servers.  They're all VMs, running 2008R2.  I've gone through all of the postings and guides I can find here on the site, with no luck.

 

My desired end-state is not to have to use a userid with admin rights, but just to spiral in and get it working, i've added a user with domain level administrator rights.  I avoided any special characters in the password, and I know the password I'm using is correct, because I can RDP into the server I'm attempting to access using those credentials.  But no form of wmic command is successful (various quoting, using \\ instead of /, using full domain name in place of shortname, etc.).

 

On the Zenoss box, I always get the following errors:

 

[librpc/rpc/dcerpc_util.c:1290:dcerpc_pipe_auth_recv()] Failed to bind to uuid 4d9f4ab8-7d1c-11cf-861e-0020af6e7c57 - NT_STATUS_NET_WRITE_FAULT

[librpc/rpc/dcerpc_connect.c:790:dcerpc_pipe_connect_b_recv()] failed NT status (c0000022) in dcerpc_pipe_connect_b_recv

[wmi/wmic.c:196:main()] ERROR: Login to remote object.

NTSTATUS: NT_STATUS_ACCESS_DENIED - Access denied

 

On the Windows side, I always see a "bad userid or password" error - even though I'm using the exact same userid/password as used for an interactive login over RDP, e.g.

 

We're operating in a secured environment, and in the past, have run into problems with e.g. LDAP calls failing, because of the GPO settings that require certain things of any processes attempting to connect ... is there anything that anyone's encountered at the network connection level that could be in play? 

 

On the other hand -- by doing this several times in a row, the account I'm trying to use does in fact get locked -- which might argue that the connection isn't being completely denied, since it's clearly getting to the point of passing the credentials over the connection.

 

To eliminate something with the domain being involved, I created an account local to the Windows server, with local administrator rights -- same behavior.

 

I'm assuming it's not something to do with DCOM permissions or such - since the error doesn't seem to target that.

 

So ... assuming that I'm correct, and that I'm not simply messing up the password (which again, I'm using on that same server to login via RDP at the exact same time)  ... is there anything else anyone is aware of that can cause a "bad userid or password" error on the windows side?

 

Any other thoughts?

 

thx!

Zenoss for windows

$
0
0

Hi Guys,

 

I'm a total beginner on this so apologies in advance if my question has already been asked . I'm looking to install this on my windows server 2008 serevrs , I have 8 in the same lan and want to start monitoring disk usage , free space etc, is there zenoss just for windows? I couldn't find one in downloads section?

 

can anyone help me?

 

 

Thanks.

Core4: How to add a new Windows Service to be monitored?

$
0
0

Hi

 

I'm trying to add a new windows service to the list of services to be monitored, but the new service isn't being discovered or reported against on the selected devices.

 

Other services/event log etc are reporting correctly so I know that WMI\DCOM security is setup correctly.

 

The service I'm trying to add is the Microsoft SCCM Agent, so I've created a new windows service by clicking the Add Service option under Infrastructure / Windows Services,  as follows

 

Name:                          CcmExec
Description:                  SMS Agent Host

Service Keys:               CcmExec

Monitored Start modes: Auto

 

I'm pretty sure I've got this right, (Except for Service Keys: - what is that?)

 

If I go to the device itself, re-model it, and goto Windows Services under Components, the newly added service doesn't appear, but I can then add it manually. 

zenwin.log then lists the service as running for the device when it's polled, but within the Zenoss web console, it jsut shows as unknown.  When the device is next re-modelled, however, it is removed from the list.

 

Have I missed a step here, I want to add this service to all our monitored Windows devices so that it's picked up automatically during modelling.

 

Thanks in advance

Mark

How Do I Monitor Windows Services Without SNMP Informant?

$
0
0
I am using Zenoss Core and have WindowsWMIDeviceTemplateV2 ZenPack installed.

I would like to start monitoring certain Windows Services. I created the services in the WinService container, and set monitoring to "true".

When I click any of my windows servers, it does not show any WinServices running on the machine. I am assuming this is because SNMP Informant is not running? Installing it is not an option, but I need to be able to monitor certain Windows Services.

How can I do this?

I basically did the same thing for OS Processes and it worked successfully, but I'm having trouble with Services.

Also if it makes a difference, I have no zWinUser/zWinPassword set up on the zProperties tab of my servers, and if possible would like to keep it this way.

edit: looks like I had zWMIMonitorIgnore set to true. Changing to false and remodeling the server brough the WinService tab back, and I can add the services as needed.

Could not read the status of Windows services (ExecNotificationQuery (WBEM_E_QUOTA_VIOLATION))

$
0
0

Hi

 

I am getting this ZENWIN error from a server where I have applied the terminal server zenpack template, it has a simple WQL query

SELECT ActiveSessions,InactiveSessions,TotalSessions FROM Win32_PerfFormattedData_TermService_TerminalServices

 

Could not read the status of Windows services (ExecNotificationQuery (WBEM_E_QUOTA_VIOLATION)) 

Does anywone know what part of the command could be causing it?

a MSDN technet page has the following

http://msdn.microsoft.com/en-us/library/aa392105(VS.85).aspx

Remarks

There are limits to the number ofANDandORkeywords that can be used in WQL queries. Large numbers of WQL keywords used in a complex query can cause WMI to return the WBEM_E_QUOTA_VIOLATION error code as anHRESULTvalue. The limit of WQL keywords depends on how complex the query is.


not sure if this is part of the overall zenwin deamon or TS template...

thanks

Alex

Monitor windows update service in stop state zenoss shuld send alert if it starts

$
0
0

Hi All,

 

I want to keep my "windows update" service on windows box's in stop state, I should get a alert if windows update service starts on any of the windows box. I tried to find out ways to do so but didn't found any easy way to do it.

 

Regards,

Manish Gaikwad

WMI access on domain controller

$
0
0
Hi Everyone,

Hope someone can help.

I know that Local Administrator group membership is pretty much required to have full access to WMI on a windows machine.

How does this work, then for a Domain Controller, that doesn't have a Local Administrators group?

Sorry, not a windows expert...just got this question from an associate here at work, and I don't have any DCs to experiment with.

Thanks,
Joseph

zenwin & zeneventlog error NT_STATUS_IO_TIMEOUT

$
0
0

Hi,

i just installed Zenoss and tryed to configure Zenoss to interact with Windows 2008 Server by WMI.

I get error from zenwin & zeneventlog:

"Could not read Windows services (NT_STATUS_IO_TIMEOUT). Check your username/password settings and verify network connectivity."

 

What could be the problem?

wmic  from zenoss shell works without any problems

Core4: How to add a new Windows Service to be monitored?

$
0
0

Hi

 

I'm trying to add a new windows service to the list of services to be monitored, but the new service isn't being discovered or reported against on the selected devices.

 

Other services/event log etc are reporting correctly so I know that WMI\DCOM security is setup correctly.

 

The service I'm trying to add is the Microsoft SCCM Agent, so I've created a new windows service by clicking the Add Service option under Infrastructure / Windows Services,  as follows

 

Name:                          CcmExec
Description:                  SMS Agent Host

Service Keys:               CcmExec

Monitored Start modes: Auto

 

I'm pretty sure I've got this right, (Except for Service Keys: - what is that?)

 

If I go to the device itself, re-model it, and goto Windows Services under Components, the newly added service doesn't appear, but I can then add it manually. 

zenwin.log then lists the service as running for the device when it's polled, but within the Zenoss web console, it jsut shows as unknown.  When the device is next re-modelled, however, it is removed from the list.

 

Have I missed a step here, I want to add this service to all our monitored Windows devices so that it's picked up automatically during modelling.

 

Thanks in advance

Mark

monitoring windows processes

$
0
0

I know by default WMI under zenoss monitores services. I was wondering how do I get zenoss to monitor the running process. I am trying to get CPU/memory for each process running on the servers.

 

Thanks,

 

Keith

Core 4.2.3

Could not read the status of Windows services (ExecNotificationQuery (WBEM_E_QUOTA_VIOLATION))

$
0
0

Hi

 

I am getting this ZENWIN error from a server where I have applied the terminal server zenpack template, it has a simple WQL query

SELECT ActiveSessions,InactiveSessions,TotalSessions FROM Win32_PerfFormattedData_TermService_TerminalServices

 

Could not read the status of Windows services (ExecNotificationQuery (WBEM_E_QUOTA_VIOLATION)) 

Does anywone know what part of the command could be causing it?

a MSDN technet page has the following

http://msdn.microsoft.com/en-us/library/aa392105(VS.85).aspx

Remarks

There are limits to the number ofANDandORkeywords that can be used in WQL queries. Large numbers of WQL keywords used in a complex query can cause WMI to return the WBEM_E_QUOTA_VIOLATION error code as anHRESULTvalue. The limit of WQL keywords depends on how complex the query is.


not sure if this is part of the overall zenwin deamon or TS template...

thanks

Alex


Zenoss UPS email notification

$
0
0

Hi All,

 

May i know if power dip or UPS in battery mode, Zenoss will send email alert to my mailbox??? I trying to find where the setting but really no idea.

zenwin & zeneventlog error NT_STATUS_IO_TIMEOUT

$
0
0

Hi,

i just installed Zenoss and tryed to configure Zenoss to interact with Windows 2008 Server by WMI.

I get error from zenwin & zeneventlog:

"Could not read Windows services (NT_STATUS_IO_TIMEOUT). Check your username/password settings and verify network connectivity."

 

What could be the problem?

wmic  from zenoss shell works without any problems

WMI NT code 0xc002001b, alerts for "Could not read Windows services" then clears

$
0
0
ZenossZenoss 3.1.0
OSLinux (x86_64) 2.6.18 (Linux hz1.uapps.net 2.6.18-238.9.1.el5 #1 SMP Tue Apr 12 18:10:13 EDT 2011 x86_64)
ZopeZope 2.12.1
PythonPython 2.6.2
DatabaseMySQL 5.0.77 (Ver 5.0.77)
RRDRRDtool 1.3.9
TwistedTwisted 8.1.0
NetSnmpNetSnmp 5.3.2
PyNetSnmpPyNetSnmp 0.28.14
WMIWmi 1.3.13

 

So every 10 minutes during our polling for Windows services a few of our servers gives us the error "Could not read Windows services" then the next time it polls the errors clear.

 

I use wmic on the Zenoss box and successfully query the devices.

The devices are all random Windows servers, 2003/2003 64-bit/ 2008 64/2008 R2.

 

Even when the device has the error, I can still go to 'Windows Services" and monitor a service, so it appears that communication is still working.

 

It is random boxes across several domains.

We did performance tunning on the Zenoss box and increased the scan interval.

Also we increased the scan interval and reduced the WMI services that we monitor.

 

Here is the error message in Zenwin logs.

=================================================================================================

2011-07-08 07:36:08,398 DEBUG zen.collector.scheduler: Task 172.36.114.2 changing state from RUNNING to WATCHER_QUERY
2011-07-08 07:36:08,398 DEBUG zen.Watcher: Fetching events for 172.36.114.2
2011-07-08 07:36:08,401 ERROR zen.zenwin: Unable to scan device 172.36.114.2: NT code 0xc002001b
2011-07-08 07:36:08,401 DEBUG zen.Watcher: closing WMI Query for 172.36.114.2
2011-07-08 07:36:08,401 DEBUG zen.Watcher: Watcher.__del__ called for 172.36.114.2, busy=False closeRequested=False
2011-07-08 07:36:08,401 DEBUG zen.zenwin: Queueing event {'severity': 4, 'component': 'zenwin', 'agent': 'zenwin', 'summary': '\n            Could not read Windows services (NT code 0xc002001b). Check your\n            username/password settings and verify network connectivity.\n            ', 'manager': 'hz1.uapps.net', 'device': '172.36.114.2', 'eventClass': '/Status/Wmi', 'monitor': 'localhost'}
2011-07-08 07:36:08,402 DEBUG zen.zenwin: Total of 1 queued events
2011-07-08 07:36:08,402 DEBUG zen.zenwin: Device 172.36.114.2 [172.36.114.2] scanned failed, NT code 0xc002001b
2011-07-08 07:36:08,402 DEBUG zen.collector.scheduler: Task 172.36.114.2 finished, result: <twisted.python.failure.Failure <class 'pysamba.twisted.callback.WMIFailure'>>
2011-07-08 07:36:08,402 DEBUG zen.collector.scheduler: Task 172.36.114.2 changing state from WATCHER_QUERY to IDLE

===================================================================================================

 

We have restarted the server, we have removed Zenpacks;

Zenpacks in use:

ZenPacks.community.DellMoncommunityEgor Puzanov2.4Yes

ZenPacks.community.VMwareDataSourcecommunityEric Enns1.1.2Yes

ZenPacks.community.VMwareESXiMonitorcommunityEric Enns1.2Yes

ZenPacks.community.WMIDataSourcecommunityEgor Puzanov2.11Yes

ZenPacks.community.WMIPerf_WindowscommunityEgor Puzanov2.5.80Yes

ZenPacks.community.deviceAdvDetailcommunityEgor Puzanov2.7Yes

ZenPacks.community.mib_browsercommunityKells Kearney & Jane Curry2.0Yes

ZenPacks.zenoss.ApacheMonitorzenossZenoss2.1.2Yes

ZenPacks.zenoss.DellMonitorzenossZenoss2.1.0Yes

ZenPacks.zenoss.DigMonitorzenossZenoss1.0.2Yes

ZenPacks.zenoss.DnsMonitorzenossZenoss2.0.2Yes

ZenPacks.zenoss.EsxTopzenossZenoss1.0.2Yes

ZenPacks.zenoss.FtpMonitorzenossZenoss1.0.2Yes

ZenPacks.zenoss.HPMonitorzenossZenoss2.1.0Yes

ZenPacks.zenoss.HttpMonitorzenossZenoss2.0.3Yes

ZenPacks.zenoss.IRCDMonitorzenossZenoss1.0.2Yes

ZenPacks.zenoss.JabberMonitorzenossZenoss1.0.2Yes

ZenPacks.zenoss.LDAPMonitorzenosszenoss1.2.3Yes

ZenPacks.zenoss.LinuxMonitorzenossZenoss1.1.5Yes

ZenPacks.zenoss.MySqlMonitorzenossZenoss2.1.2Yes

ZenPacks.zenoss.NNTPMonitorzenosszenoss1.0.2Yes

ZenPacks.zenoss.NtpMonitorzenossZenoss Team2.0.3Yes

ZenPacks.zenoss.RPCMonitorzenosszenoss1.0.2Yes

ZenPacks.zenoss.XenMonitorzenossZenoss1.0.3Yes

ZenPacks.zenoss.ZenAWSzenossZenoss1.0.3Yes

ZenPacks.zenoss.ZenJMXzenossZenoss3.5.2Yes

ZenPacks.zenoss.ZenossVirtualHostMonitorzenossZenoss2.3.6Yes

 

We are potentially looking at the Enterprise version of Zenoss, but if we can't fix this issue we will have to move on to another monitoring solution.

Please let me know if there are any other troubleshooting I can do...

 

It could possible be something in the polling that is causing the issue, but I am kinda lost on where to look next.

Thanks

Unable to connect to WMI issue

$
0
0

Hi, all ... I've been unable to connect via WMI to any of our Windows servers.  They're all VMs, running 2008R2.  I've gone through all of the postings and guides I can find here on the site, with no luck.

 

My desired end-state is not to have to use a userid with admin rights, but just to spiral in and get it working, i've added a user with domain level administrator rights.  I avoided any special characters in the password, and I know the password I'm using is correct, because I can RDP into the server I'm attempting to access using those credentials.  But no form of wmic command is successful (various quoting, using \\ instead of /, using full domain name in place of shortname, etc.).

 

On the Zenoss box, I always get the following errors:

 

[librpc/rpc/dcerpc_util.c:1290:dcerpc_pipe_auth_recv()] Failed to bind to uuid 4d9f4ab8-7d1c-11cf-861e-0020af6e7c57 - NT_STATUS_NET_WRITE_FAULT

[librpc/rpc/dcerpc_connect.c:790:dcerpc_pipe_connect_b_recv()] failed NT status (c0000022) in dcerpc_pipe_connect_b_recv

[wmi/wmic.c:196:main()] ERROR: Login to remote object.

NTSTATUS: NT_STATUS_ACCESS_DENIED - Access denied

 

On the Windows side, I always see a "bad userid or password" error - even though I'm using the exact same userid/password as used for an interactive login over RDP, e.g.

 

We're operating in a secured environment, and in the past, have run into problems with e.g. LDAP calls failing, because of the GPO settings that require certain things of any processes attempting to connect ... is there anything that anyone's encountered at the network connection level that could be in play? 

 

On the other hand -- by doing this several times in a row, the account I'm trying to use does in fact get locked -- which might argue that the connection isn't being completely denied, since it's clearly getting to the point of passing the credentials over the connection.

 

To eliminate something with the domain being involved, I created an account local to the Windows server, with local administrator rights -- same behavior.

 

I'm assuming it's not something to do with DCOM permissions or such - since the error doesn't seem to target that.

 

So ... assuming that I'm correct, and that I'm not simply messing up the password (which again, I'm using on that same server to login via RDP at the exact same time)  ... is there anything else anyone is aware of that can cause a "bad userid or password" error on the windows side?

 

Any other thoughts?

 

thx!

Zenoss for windows

$
0
0

Hi Guys,

 

I'm a total beginner on this so apologies in advance if my question has already been asked . I'm looking to install this on my windows server 2008 serevrs , I have 8 in the same lan and want to start monitoring disk usage , free space etc, is there zenoss just for windows? I couldn't find one in downloads section?

 

can anyone help me?

 

 

Thanks.

Viewing all 155 articles
Browse latest View live