David,
It doesn't keep the client from spiking the CPU to 100%, but it does return to normal in half the time now. I'm wondering if the rest of that is the WMI call for services.
Scot Kreienkamp
Senior Systems Engineer
skreien at la-z-boy.com
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Scot Kreienkamp Sent: Monday, May 16, 2011 9:33 AM To: David Baldwin; xymon at xymon.com Subject: Re: [Xymon] Windows PS client svcs data missing
David,
I don't really need the event reporting, it's just a nice-to-have. I'll try disabling it and see if it reduces the load.
Scot Kreienkamp
Senior Systems Engineer
skreien at la-z-boy.com
From: David Baldwin [mailto:David.Baldwin at ausport.gov.au] Sent: Monday, May 16, 2011 12:53 AM To: Scot Kreienkamp; xymon at xymon.com Subject: RE: [Xymon] Windows PS client svcs data missing
Scot,
One other thing… I noticed that whenever the PS client runs it takes the CPU up to 100% for 5-15 seconds or so on many of the systems it's installed on. I'm already getting push back from other systems admins because of that. I imagine many people will be complaining about it sooner or later, that's kind of a bad thing. J
The CPU spike could be the event log reporting – I don’t actually use that part of the client myself (there is a switch to disable event log reporting completely). Get-EventLog cmdlet is very braindead and scans the entire event log every time it runs (the –since “filter” does not use any indexing as far as I can tell on any version of Windows). I forward my event logs with SNARE to a central syslog server and then use winevtmsgs which I have added to xymonton. I did have a go at using .Net to properly “tail” the event logs, but didn’t get that finished to add to the client. Might take another look at that when I get a chance.
David.
Scot Kreienkamp
Senior Systems Engineer
skreien at la-z-boy.com
From: David Baldwin [mailto:david.baldwin at ausport.gov.au] Sent: Monday, May 09, 2011 9:31 PM To: Scot Kreienkamp; xymon at xymon.com Subject: Re: [Xymon] Windows PS client svcs data missing
On 10/05/11 2:09 AM, Scot Kreienkamp wrote:
Hi everyone,
I've run into a problem with the Windows Powershell client intermittently omitting service data on Win2008. Here's the relevant parts of the client data file:
Microsoft Windows Server 2008 R2 Standard (build 7600)
---snip---
Persistent Routes:
None
[ifstat]
fe80::619f:8c8:bf22:6ca5%11 2254617444 2999570366
10.100.1.211 2254617444 2999570366
::1 0 0
127.0.0.1 0 0
[svcs]
Name StartupType Status DisplayName
[uptime]
sec: 8168297
94 days 12 hours 58 minutes 17 seconds
Bootup: 20110203213923.713291-360
[who]
SESSIONNAME USERNAME ID STATE TYPE DEVICE
---snip---
As you can see, the svcs portion is empty. I already updated the client to the latest PS client files available and it still is happening. I'm not a programmer so I'm not sure how I can help troubleshoot this, but I'm willing to help in any way I can.
services information is gathered from WMI. The builtin powershell "get-services" doesn't return sufficient information.
Try the following:
open a powershell window (powershell.exe lives in C:\WINDOWS\system32\windowspowershell\v1.0)
Get-WmiObject -Class Win32_Service
Try running it a few times. Is it slow, or does it sometimes not return any information?
Also, if you look at the Client data report (link at the bottom of various pages - cpu, disk, procs, svcs), do you see sections for [WMI:Win32...] towards the bottom of the report. There should be:
WMI:Win32_OperatingSystem WMI:Win32_ComputerSystem WMI:Win32_BIOS WMI:Win32_Processor WMI:Win32_PhysicalMemory WMI:Win32_LogicalDisk WMI:Win32_QuickFixEngineering WMI:Win32_Product
If these are missing there may be a problem with the WMI service. Try restarting it in the first instance.
David.
Thanks!
Scot Kreienkamp
skreien at la-z-boy.com
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.
-- David Baldwin - IT Unit Australian Sports Commission www.ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au Leverrier Street Bruce ACT 2617
Keep up to date with what's happening in Australian sport visit www.ausport.gov.au
This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.