Hi All,
I need a bit of assistance in setting up BBWin0.11 with Hobbit 4.3 in Centralised config mode.
My problem lies with the eventlog monitoring of my Windows hosts. When running BBWin in local config mode, I can setup filtering so that only specific event log types get sent to the hobbit server and displayed on the msgs page. However when I configure BBWin to use a central config, I cant filter which event logs get sent to the hobbit server and displayed on the msgs page. As a result my msgs page is full of eventlog entries which I dont need to know about.
Below is a copy of my BBWin.cfg and the client-local.cfg on the hobbit server
<?xml version="1.0" encoding="utf-8" ?> <configuration> <bbwin> <setting name="bbdisplay" value="hobbit-server" /> <!-- <setting name="bbdisplay" value="yoursecondbbdisplay:port" />--> <!-- BB Pager Part --> <!--<setting name="usepager" value="false" /> <setting name="bbpager" value="yourfirstbbpager" /> <setting name="bbpager" value="yourfirstbbpager" /> <setting name="pagerlevels" value="red yellow" /> -->
<!-- bbwin mode local or central -->
<setting name="mode" value="central" />
<setting name="configclass" value="win32" />
<setting name="autoreload" value="true" />
<setting name="timer" value="5m" />
<load name="cpu" value="cpu.dll"/>
<load name="disk" value="disk.dll"/>
<load name="externals" value="externals.dll"/>
<load name="memory" value="memory.dll"/>
<load name="msgs" value="msgs.dll"/>
<load name="procs" value="procs.dll"/>
<load name="stats" value="stats.dll"/>
<load name="svcs" value="svcs.dll"/>
<load name="uptime" value="uptime.dll"/>
<load name="who" value="who.dll"/>
<setting name="loglevel" value="3" />
<setting name="logpath" value="C:\Program Files\BBWin\logs\BBWin.log"/>
<!-- If true, the agent will report reporting failures as warning events--> <setting name="logreportfailure" value="false" /> </bbwin>
client-local.cfg: (dcstest2 is the name of one of my hosts I am having problems with)
[dcstest2] eventlog:security ignore Success eventlog:application ignore information eventlog:system ignore information
Also something else I noticed is that the msgs page for my hobbit server which I also monitor displays the eventlog entries of my Win32 hosts. The hobbit server is running on SUSE Server 10.1 and I have even tried a complete rebuild in case there was a problem during the install phase.
Assistance would be greatly appreciated.
Thanks