Search found 11 matches

by averylarry
Thu Sep 22, 2022 1:22 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: Event log description text -- case insensitive
Replies: 1
Views: 6493

Event log description text -- case insensitive

I want to be alerted anytime a particular windows account is used/accessed/modified in any way. I set the log source to be security, event source microsoft-windows-security-auditing, and alert condition to be any computer, any event level, any event id, and description contains <the username>. My pr...
by averylarry
Mon Mar 09, 2020 11:31 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Test for MX record *changes* ??
Replies: 1
Views: 7201

Test for MX record *changes* ??

I'd like to setup a test that will alert me when a given domain's MX records change. By "change", I mean if an MX record is added, removed, or modified. Right now it appears that a DNS test using MX request type can test if *any* of the returned MX records match a particular answer. I coul...
by averylarry
Mon Jan 06, 2020 3:53 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: Event logs intermittent transient failures
Replies: 12
Views: 23619

The big new problem we have, however, I believe is a memory leak somewhere. Hostmonitor process increases memory usage until it hits about 1.9Gb and then all of the tests basically stop working (and I get hundreds of emails). If I try to connect via RCC, I get this in the log: [12/29/2019 7:13:30 AM...
by averylarry
Mon Jan 06, 2020 3:49 pm
Forum: Configuration, Maintenance, Troubleshooting
Topic: Event logs intermittent transient failures
Replies: 12
Views: 23619

I'm back from vacation. Update: Event log tests all seem to be fine. Service tests: On the old server (windows 2008 R2) running HM 8.14 all of the service tests run with only 0.04% unknown status (in other words, they work and are stable). On the new server (windows 2019) running HM 12.01 hotfix the...
by averylarry
Fri Dec 20, 2019 11:28 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Event logs intermittent transient failures
Replies: 12
Views: 23619

On the old server, statistics for event log tests over the last 1300 days: 99.17% alive 0.03% dead 0.79% unknown Statistics for Service tests over the last 500 days: 98.32% alive 1.4% dead 0.03% unknown If I turn the old server's HM back on, the Event log and Service tests are working (though clearl...
by averylarry
Fri Dec 20, 2019 9:56 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Event logs intermittent transient failures
Replies: 12
Views: 23619

I really appreciate your effort. My service tests are running over 60% unknown status and my event log tests have been running at 45% unknown status.

I will upgrade to the beta and apply the hotfix and report my results next week.
by averylarry
Wed Dec 18, 2019 9:05 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Event logs intermittent transient failures
Replies: 12
Views: 23619

I wish I knew more about how it works internally. So far when I restart the hostmonitor service, the tests all immediately start working again. Is there some type of connection pool being re-used that needs to be flushed? Aside from hostmonitor, similar problems happen with web servers' application ...
by averylarry
Wed Dec 18, 2019 8:28 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Event logs intermittent transient failures
Replies: 12
Views: 23619

This is also happening with Service tests, though less often. "Win32 error #1722 The RPC server is unavailable."
by averylarry
Tue Dec 17, 2019 9:48 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: event log test -- The stub received bad data
Replies: 5
Views: 12536

The new thread is a different issue. HM 8.14 doesn't have a choice of NT or Vista mode. 11.98 does and it resolved the "stub received bad data" issue.
by averylarry
Tue Dec 17, 2019 9:45 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Event logs intermittent transient failures
Replies: 12
Views: 23619

Event logs intermittent transient failures

Perhaps this is just going to be normal, but it's frustrating. All of my NT Event Log tests fail intermittently with "Cannot open event log. The handle is invalid.". I have put them in a folder and set the folder property "Non-simultaneously test execution". This seems to help th...
by averylarry
Tue Dec 17, 2019 9:00 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: event log test -- The stub received bad data
Replies: 5
Views: 12536

I upgraded and still have an issue or 2. I'll start a new thread.