Search found 17 matches

by paulnus
Thu Jan 21, 2021 1:42 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: NTEventUser - Domain Admin Login Help
Replies: 6
Views: 14177

Worked!

I had to use "New Logon:" since the "Account Name:" appeared multiple times and grabbed the first one which is not what i wanted.

Code: Select all

[substr("%NTEventText%", indexof("%NTEventText%","New Logon:"), 100) getword 8]
by paulnus
Thu Jan 21, 2021 1:12 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: NTEventUser - Domain Admin Login Help
Replies: 6
Views: 14177

No problem, I was explaining it dumb. What i was saying was that I was thinking the %NTEventUser% was something special that would be trying to extract usernames. I'm not in the logs enough to know that "User:" is a common field. Great, i'll try to just return the line. That will suit my n...
by paulnus
Thu Jan 21, 2021 12:11 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: NTEventUser - Domain Admin Login Help
Replies: 6
Views: 14177

I was worried that "Account Name" would not be the key field it would be looking for. The "User: N/A" is not part of the returned event results. Windows on HM: Microsoft Windows Server 2019 Datacenter HM Version: v12.56 Windows on DC: Microsoft Windows Server 2019 Standard RMA Ve...
by paulnus
Thu Jan 21, 2021 11:51 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: temperature probe
Replies: 3
Views: 14785

We use the Geist Watchdog Sensors with the SNMP Get (OID: 1.3.6.1.4.1.21239.5.1.2.1.5.1)

Will bring back a 3 digit result (ie: 806) = 80.6F

https://www.vertiv.com/en-us/products-c ... tchdog-15/
by paulnus
Thu Jan 21, 2021 10:48 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: NTEventUser - Domain Admin Login Help
Replies: 6
Views: 14177

NTEventUser - Domain Admin Login Help

Hello, My goal is to alert when a domain admin logs into a device on our network. We have the proper auditing turned on for our Windows servers and I am putting Event Log tests on all our domain controllers. My test properly picks up the event I am looking for (4624) and it does properly bring back ...
by paulnus
Sat Nov 14, 2020 8:08 am
Forum: Wish list
Topic: Unquoted Service Path Considerations
Replies: 2
Views: 20004

Unquoted Service Path Considerations

We regularly run security scans and often we see that the RMA installs will be vulnerable to an "unquoted service path". I was hoping future releases could consider having protections in place so that when installed using the configuration tool, it will have proper wrapped quotes to preven...
by paulnus
Tue Feb 25, 2020 4:20 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: PendingFileRenameOperations
Replies: 6
Views: 15057

Thanks Alex!

PS - The upgrade fixed the issue. Confirmed.
by paulnus
Mon Feb 17, 2020 4:03 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: PendingFileRenameOperations
Replies: 6
Views: 15057

The registry updates every time the service is restarted. If you stop the service, the temp file disappears but the registry entry remains. If you restart the service, the filename changes to a different random filename. The .tmp file is not able to be deleted due to it being locked by Host Monitor....
by paulnus
Mon Feb 17, 2020 3:31 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: PendingFileRenameOperations
Replies: 6
Views: 15057

PendingFileRenameOperations

Hello, When starting the "KS Advanced Host Monitor" service, there is a temp file written to C:\Windows\Temp\ that gets created upon service start. This temp file also registers inside the registry as a file that flags the system as needing a reboot via the "PendingFileRenameOperation...
by paulnus
Thu Jan 03, 2019 12:19 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: Dashboard Report - Auto-generate Not Sticking
Replies: 3
Views: 9987

Hmmmm... I stopped the service and ran HM on the server. I updated the settings, saved, and restarted the service. It now saved my settings. I just run RCC to connect to the running service and make my updates. I've never had a problem with any other settings before. It's plausible I'm doing somethi...
by paulnus
Wed Jan 02, 2019 8:51 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Dashboard Report - Auto-generate Not Sticking
Replies: 3
Views: 9987

Dashboard Report - Auto-generate Not Sticking

Hello, Checking to see if I'm just misunderstanding how the product works for reports and I cant seem to see an issue from reading the documentation. I want to run the dashboard report every 1 min and spit it out to a folder on the local server. I am able to go into Reports>Autogenerate Options ... ...
by paulnus
Wed Jan 06, 2016 1:30 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: Custom Comment Line Labels
Replies: 1
Views: 8784

Custom Comment Line Labels

My forum and user manual foo is not working well. I distinctly remember being able to add custom names for comment lines in a config/ini file at one point in time and now trying to remember how to do this. Tried looking all over and simply not finding where that is done. I have a template of 99 comm...
by paulnus
Mon Sep 19, 2011 9:05 am
Forum: Reports
Topic: Generate Report Every 'X' min on views?
Replies: 9
Views: 54980

Was writing to the common log.

When we switched it to the private log, it appeared to work correctly.
by paulnus
Tue Sep 06, 2011 11:08 am
Forum: Reports
Topic: Generate Report Every 'X' min on views?
Replies: 9
Views: 54980

Hostmonitor is started as a service. I am using RCC to setup HostMonitor. (v3.84) When I hit the generate reports button, it works flawlessly. I am assuming that the permissions used to generate the report when I press button is same when on a timer. This may be the issue eh? Ill have to check w/ ou...