Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

zusätzliche Logs werden nicht mehr übertragen #69

Open
1 of 2 tasks
Terminator81 opened this issue Apr 28, 2022 · 3 comments
Open
1 of 2 tasks

zusätzliche Logs werden nicht mehr übertragen #69

Terminator81 opened this issue Apr 28, 2022 · 3 comments
Labels
waiting for response Windows Windows operating system

Comments

@Terminator81
Copy link

Agent Mode:

  • Pull Model (openITCOCKPIT Server request data from Agent)
  • Push Model (Agent send data to openITCOCKPIT)

Versions

  • openITCOKPIT Server Version: 4.1.1
  • openITCOCKPIT Monitoring Agent Version: 3.0.9

Operating system
Windows Server 2016

  • Do you use an HTTP proxy? no
  • Are you using Auto-TLS, HTTPS or HTTP?
  • Used CPU architecture: i386, amd64, arm64 or armhf

Describe the bug
Seit dem Update auf Agent Version 3.0.9 funktionieren folgenden Einträge in der Config.ini nicht mehr

Define comma separated windows event log log types

wineventlog-logtypes = System,Application,Security,'Active Directory Web Services','DFS Replication','Directory Service','DNS Server','Windows PowerShell'

d.h. es werden nur noch die default Einträge System, Sicherheit und Application übertragen

https://i.imgur.com/mebq59N.png

@Terminator81
Copy link
Author

im log steht auch das

time="2022-04-28T14:53:58+02:00" level=error msg="Event Log: Ausnahmefehler aufgetreten. (Die Anfrage ist ungültig. )"

@nook24 nook24 added the Windows Windows operating system label Apr 28, 2022
@nook24
Copy link
Member

nook24 commented Apr 28, 2022

For both methods WMI (default) and PowerShell quotes are not required.
I tested successfully event logs with spaces on my Windows 10 system like so.

config.ini

# Define comma separated windows event log log types
# Event Logs containing spaces DO NOT need to be quoted: Security,Sophos Cloud AD Sync,Application
wineventlog-logtypes = System,Foobar,DFS Replication,Windows PowerShell

Bildschirmfoto 2022-04-28 um 15 13 38

How ever, due to you have quoted the event logs in the past, you have to edit your service configuration and remove the quotes (openITCOCKPIT web interface -> edit service, scroll down to arguments) or re-create the service via the wizard.

Bildschirmfoto 2022-04-28 um 15 19 41

Hope this helps.


Ups, habe erst jetzt bemerkt das, das Issue auf deutsch ist :)

@nook24
Copy link
Member

nook24 commented Feb 9, 2023

Ist das noch aktuell?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
waiting for response Windows Windows operating system
Projects
None yet
Development

No branches or pull requests

2 participants