Hi Matthew,
2008/4/2, Matthew.Roberts at nt.gov.au <Matthew.Roberts at nt.gov.au>:
Hi All,
I need a bit of assistance in setting up BBWin0.11 with Hobbit 4.3 in Centralised config mode.
My problem lies with the eventlog monitoring of my Windows hosts. When running BBWin in local config mode, I can setup filtering so that only specific event log types get sent to the hobbit server and displayed on the msgs page. However when I configure BBWin to use a central config, I cant filter which event logs get sent to the hobbit server and displayed on the msgs page. As a result my msgs page is full of eventlog entries which I dont need to know about.
Below is a copy of my BBWin.cfg and the client-local.cfg on the hobbit server
<?xml version="1.0" encoding="utf-8" ?> <configuration> <bbwin>
...
<!-- bbwin mode local or central --> <setting name="mode" value="central" /> <setting name="configclass" value="win32" />
...
<setting name="logreportfailure" value="false" /></bbwin>
client-local.cfg: (dcstest2 is the name of one of my hosts I am having problems with)
[dcstest2] eventlog:security ignore Success eventlog:application ignore information eventlog:system ignore information
You should use [win32] instead of [dcstest2] in your client-local.cfg because in your bbwin.cfg, the configclass is set to win32 (<setting name="configclass" value="win32" />). Once you will do that, BBWin, will get the rules you have set to ignore some events.
-- Etienne GRIGNON