Hi all
MK version : 1.6.0p15 linux raw edition server / 1.6.0p15 windows agent
OS version : 1.6.0p15 windows agent
Error message : File C:\Logs\System.evtx CRIT - File not found
If it is an problem with checks or plugins output of “cmk --debug -vvn hostname” : OMD[he]:~$ cmk --debug -vvn myserver01.test.dir
[cpu_tracking] Start with phase ‘busy’
Check_MK version 1.6.0p15
Try aquire lock on /omd/sites/he/tmp/check_mk/counters/myserver01.test.dir
Got lock on /omd/sites/he/tmp/check_mk/counters/myserver01.test.dir
Releasing lock on /omd/sites/he/tmp/check_mk/counters/myserver01.test.dir
Released lock on /omd/sites/he/tmp/check_mk/counters/myserver01.test.dir
Loading autochecks from /omd/sites/he/var/check_mk/autochecks/myserver01.test.dir.mk
- FETCHING DATA
[cpu_tracking] Push phase ‘agent’ (Stack: [‘busy’])
[agent] No persisted sections loaded
[agent] Not using cache (Don’t try it)
[agent] Execute data source
[agent] Connecting via TCP to 10.64.150.25:6556 (5.0s timeout)
[agent] Reading data from agent
[agent] Write data to cache file /omd/sites/he/tmp/check_mk/cache/myserver01.test.dir
Try aquire lock on /omd/sites/he/tmp/check_mk/cache/myserver01.test.dir
Got lock on /omd/sites/he/tmp/check_mk/cache/myserver01.test.dir
Releasing lock on /omd/sites/he/tmp/check_mk/cache/myserver01.test.dir
Released lock on /omd/sites/he/tmp/check_mk/cache/myserver01.test.dir
[cpu_tracking] Pop phase ‘agent’ (Stack: [‘busy’, ‘agent’])
[cpu_tracking] Push phase ‘agent’ (Stack: [‘busy’])
[piggyback] No persisted sections loaded
[piggyback] Execute data source
No piggyback files for ‘myserver01.test.dir’. Skip processing.
No piggyback files for ‘10.64.150.25’. Skip processing.
[cpu_tracking] Pop phase ‘agent’ (Stack: [‘busy’, ‘agent’])
CPU utilization OK - 15min average: 9.35%, user perc: 4.1 %, privileged perc: 2.0 %, 4 CPUs
Disk IO SUMMARY OK - Read: 2.07 kB/s, Write: 88.05 kB/s, Average Read Wait: 0.73 ms, Average Write Wait: 2.30 ms, Average Read Queue Length: 0.00, Average Write Queue Length: 0.02, Read operations: 0.09 1/s, Write operations: 8.63 1/s
DotNet Memory Management Global OK - 1.85% time in GC
File C:\Logs\System.evtx CRIT - File not found
Filesystem C:/ OK - 66.12% used (39.35 of 59.51 GB), trend: -1.08 GB / 24 hours
Interface 1 OK - [vmxnet3 Ethernet Adapter 2] (Connected) 10 Gbit/s, In: 1.11 kB/s (0.0%), Out: 7.58 kB/s (0.0%)
Interface 2 OK - [isatap.{2CE53A17-F8AB-4757-91A2-44A4A8C3BB34}] (Connected) 100 kbit/s, In: 0 B/s (0.0%), Out: 0 B/s (0.0%)
Log Forwarding OK - Forwarded 1 messages from System
Log HardwareEvents OK - no error messages
Log Internet Explorer OK - no error messages
Log Key Management Service OK - no error messages
Log Windows PowerShell OK - no error messages
Memory and pagefile OK - Memory usage: 88.07% (28.18 GB/32 GB), 60 min average: 88.17% (28.21 GB), Commit charge: 84.28% (29.09 GB/34.51 GB), 60 min average: 84.17% (29.05 GB)
Process dotnet.exe OK - 116 processes, 170.2 TB virtual, 28.32 GB physical, 5.8% CPU (15 min average: 5.3%), 79281 process handles, youngest running for: 0.00 s, oldest running for: 14 d
Processor Queue OK - 15 min load: 2.28 at 4 Cores (0.57 per Core)
Service CheckMkService OK - Check MK Service: running (start type is auto)
System Time OK - Offset: - 5.01 µs
System Updates WARN - 0 important updates, 1 optional updates >=1 (!)
Uptime OK - Up since Mon Jul 27 15:06:20 2020 (14d 02:34:17) - EXECUTING INVENTORY PLUGINS
Plugins: check_mk mem winperf_if
[cpu_tracking] End
OK - [agent] Version: 1.6.0p15, OS: windows, execution time 4.1 sec | execution_time=4.098 user_time=0.190 system_time=0.010 children_user_time=0.000 children_system_time=0.000 cmk_time_agent=3.891
Description of the problem : Unfortunately fileinfo not works. I don’t know why, because I’ve tried different files on C:. The Agent is running with the default “System”-account. I’ve created a WATO-rule in the main directory for fileinfo and pasted this path:
C:\Logs\System.evtx
Same rule for Ubuntu server with “/var/log/sssd/sssd.log” as path is working.
What is the problem under windows? Can somebody help me?
Best regards
Stefan