ZenPacks : WMI Data Source : Comments

RE: WMI Data Source

community@zenoss.org — Thu, 29 Oct 2009 18:12:59 GMT

I've posted a Subversion version of the ZenPack for testing with Zenoss 2.5.

RE: WMI Data Source

community@zenoss.org — Thu, 29 Oct 2009 19:54:27 GMT

twm1010 and I tested a direct install of the pack on 2.5 as well as an install of the old version of the pack on 2.4.5, then upgrading the pack to the beta, then upgrading zenoss to 2.5. The ZenPack worked fine in both cases.

Egor did mention that WMIDataSource 2.0 doesn't support WMI name spaces other than root/cimv2 for now, so this is by no means a final version of the pack for 2.5, but it's an excellent start.

RE: WMI Data Source

community@zenoss.org — Tue, 03 Nov 2009 21:25:09 GMT

Support for name spaces other than root/cimv2 added to WMIDataSource 2.0.1.

RE: WMI Data Source

community@zenoss.org — Wed, 04 Nov 2009 09:58:37 GMT

Thanks! I upgraded to 2.5 from 2.4.5, where I was already using this zenpack. After upgrade, it didn't work and I read the notice afterthat, that there are some issues with this zenpack.

After upgrading this zenpack to 2.0.1, zenperfwmi daemon works again and for example exchange zenpack is working again too. Great work!

RE: WMI Data Source

community@zenoss.org — Thu, 05 Nov 2009 23:33:35 GMT

Egor sent me source for a transitional version, 1.5. I've attached it to the page and branched and tagged it in Subversion. The 1.5 version is supposed to work with Zenoss 2.4.5 and Zenoss 2.5 and work post-upgrade.

RE: WMI Data Source

community@zenoss.org — Fri, 06 Nov 2009 06:41:09 GMT

So version 1.5 is higher and more stable then 2.0.1. ?

RE: WMI Data Source

community@zenoss.org — Fri, 06 Nov 2009 15:21:22 GMT

Not realy.

WMIDataSource 1.1 used WinCollector class from Zenoss <= 2.4.5. In Zenoss 2.5.0 WinCollector class doesn't exist and WMIDataSource 2.0 used new ZenCollector classes. This is why WMIDataSource 1.1 doesn't work with Zenoss 2.5.0 and WMIDataSource 2.0 doesn't work with Zenoss 2.4.5. To provide successful upgrade source, I've made WMIDataSource 1.5 wich is WMIDataSource 1.1 with WinCollector class integrated in Zenpack, it works with bouth Zenoss versions, but further development will be only ZenCollector based.

RE: WMI Data Source

community@zenoss.org — Wed, 09 Dec 2009 18:19:29 GMT

I installed this pack, but i get following error when i try to start deamon:

2009-12-09 19:03:29,920 INFO zen.zenperfwmi: Connecting to localhost:8789
2009-12-09 19:03:29,967 INFO zen.zenperfwmi: Connected to ZenHub
2009-12-09 19:03:30,058 ERROR zen.zenperfwmi: Could not retrieve service ZenPacks.community.WMIDataSource.services.WmiPerfConfig
2009-12-09 19:03:30,058 CRITICAL zen.zenperfwmi: Invalid monitor: localhost
2009-12-09 19:03:30,059 INFO zen.zenperfwmi: Deleting PID file /usr/local/zenoss/zenoss/var/zenperfwmi-localhost.pid ...
2009-12-09 19:03:30,059 INFO zen.zenperfwmi: Daemon zenperfwmi shutting down

Please help me.

Thanks.

RE: WMI Data Source

community@zenoss.org — Wed, 09 Dec 2009 19:40:08 GMT

You'll need to restart zenoss completely to register the new daemon. As the zenoss user, do a 'zenoss restart'.

RE: WMI Data Source

community@zenoss.org — Thu, 10 Dec 2009 07:53:43 GMT

Thank you very much. That did help me

RE: WMI Data Source

community@zenoss.org — Tue, 19 Jan 2010 20:01:58 GMT

I've installed the zenpack fine...but if I try to edit a datasource in WMIDevice template I get the following error:

Type: KeyError
Value: 'editWMIDataSource'

Traceback (innermost last):

Module ZPublisher.Publish, line 119, in publish
Module ZPublisher.mapply, line 88, in mapply
Module ZPublisher.Publish, line 42, in call_object
Module Products.ZenModel.ZenModelBase, line 65, in __call__
Module OFS.Traversable, line 301, in restrictedTraverse
Module OFS.Traversable, line 284, in unrestrictedTraverse
__traceback_info__: ([], 'editWMIDataSource')

KeyError: 'editWMIDataSource'

Anyone seen this before?

RE: WMI Data Source

community@zenoss.org — Thu, 28 Jan 2010 01:48:51 GMT

I didn't see that I had to upgrade to the latest WMI Zenpack before I upgraded Zenoss from 2.4.x to 2.5.1. Now all my WMI datasources cause errrors like the one listed below. How do I fix this?

Cmd: $ZENHOME/Products/WMIPerformanceMonitor/libexec/wmi_stats.pl MemPage "rduavs1.rd.com" "192.168.18.143" "RD\zenwin" "MyPassword" - Code: 126 - Msg: Command invoked cannot execute, permissions problem or command is not an executable

RE: WMI Data Source

community@zenoss.org — Thu, 28 Jan 2010 02:09:46 GMT

Where's the documentation for this ZenPack?

RE: WMI Data Source

community@zenoss.org — Thu, 28 Jan 2010 13:07:28 GMT

There really isn't much documentation other than this ZenPack page. There's a large warning at the top of the page explaining that you need to install version 1.5 before upgrading (but I guess you missed that somehow). You have effectively trashed your install as far as I know (I never could recover my king crab install after upgrading with the older version of the ZenPack). Perhaps Egor knows of a way to recover from that.

RE: WMI Data Source

community@zenoss.org — Thu, 28 Jan 2010 13:09:09 GMT

smcingvale, I assume you restarted Zenoss after installing the ZenPack? If not then that is most certainly your problem.

RE: WMI Data Source

community@zenoss.org — Thu, 28 Jan 2010 16:57:39 GMT

WMIPerformanceMonitor ZenPack has no relation with WMI DataSource ZenPack. Ask WMIPerformanceMonitor author.

RE: WMI Data Source

community@zenoss.org — Sat, 10 Apr 2010 01:44:53 GMT

Hi bigegor,

Thanks for developing this great zenpack. The version 2.2 is very pwoerful to manage the Windows 2000/2003 servers that I want to collect the perf. stats.

I'm interesting that how can I get the software installed list (ie. app and remove program) from WMI?

I can see the software list if I using SNMP collector plugin only.

And the Win32_product seem no return in Windows server (I've test using wbemtest.exe, select * from Win32_Product, return invalid class)

RE: WMI Data Source

community@zenoss.org — Sat, 10 Apr 2010 07:44:58 GMT

Hi kimalto,

install Windows Installer Provider.

http://msdn.microsoft.com/en-us/library/aa394523(v=VS.85).aspx

Egor

RE: WMI Data Source

community@zenoss.org — Tue, 04 May 2010 03:27:37 GMT

Hi Egor,

I'm trying to install version 2.3 and restart the services. I could able to see the package is listed at Zenpack module but I don't see any templates added in to /device/server/windows.

How do I able to use this package for my windows monitoring? Sorry that I might missed out something, please correct me the way to get this zenpack works. Thanks

RE: WMI Data Source

community@zenoss.org — Tue, 04 May 2010 14:52:42 GMT

This ZenPack just adds the daemon and the datasource type to be able to do WMI monitoring. After installing the pack you need to also install http://community.zenoss.org/docs/DOC-3500 which provides the performance template. You then need to add your devices to /Devices/CIM/WMI and model them.

RE: WMI Data Source

community@zenoss.org — Tue, 29 Jun 2010 13:40:39 GMT

Having some issues adding a WMI data source after installing the zenpack. I installed 2.5 and just recently install the 2.5.71 zenpack from SVN and both seem to have the same issue for me.

There are no errors during the installation of the zenpack. I have also restarted zenoss and bounced the server for good measure after the install.

odd part is if I install the wmi performance zenpack http://community.zenoss.org/docs/DOC-3500 …it create WMI data sources …but I can't edit or view them ..I get the same error

I get the following error when tailing the $ZENHOME/log/event.log http://pastebin.com/YHD2h9XT

Anything I can check or suggestions?

RE: WMI Data Source

community@zenoss.org — Thu, 15 Jul 2010 22:36:23 GMT

I've got an issue with the file system displaying unknown for used and free bytes. The total amount shows up correctly and I have bound the WMIDevice template to the windows class. Do I need the SNMP monitor enabled to see disk usage or should this template handle this?

RE: WMI Data Source

community@zenoss.org — Fri, 16 Jul 2010 08:50:11 GMT

1. WMIDevice template doesn't monitor file systems.

2. wait minimum 15 minutes (3 collector cycles) after modeling for performance data.

Egor

RE: WMI Data Source

community@zenoss.org — Fri, 16 Jul 2010 20:25:43 GMT

Ok, so I need the SNMP file system map enabled for monitoring the file system? Also, Win Services and OS processes are not populated, should they be?

RE: WMI Data Source

community@zenoss.org — Fri, 16 Jul 2010 21:10:41 GMT

I installed this pack along with this one: http://community.zenoss.org/docs/DOC-3500 and I'm monitoring filesystems perfectly fine. Windows Services monitoring via WMI is built right in to Zenoss core, so if it's not working then you'll need to troubleshoot. Make sure you put the devices in the CIM/WMI class and then model them in there. That will provide all the WMI info that you need. I'm not sure about OS Processes. Haven't tested monitoring of those yet via WMI.

RE: WMI Data Source

community@zenoss.org — Thu, 22 Jul 2010 09:59:37 GMT

Hi Egor,

I have a problem after upgrade to Zenoss3 with WMI DataSource 2.7

agent zenhub

dedupid localhost|ZenPacks.community.WMIDataSource.services.WmiPerfConfig.WmiPerfConfig|||5|Unhandled exception in zenhub service ZenPacks.community.WMIDataSource.services.WmiPerfConfig.WmiPerfConfig:

\'perfindex\'

traceback Traceback (most recent call last): File "/usr/local/zenoss/zenoss/Products/ZenCollector/services/config.py", line 84, in _wrapFunction return functor(*args, **kwargs) File "/usr/local/zenoss/zenoss/ZenPacks/ZenPacks.community.WMIDataSource-2.7.egg

methodCall _createDeviceProxy((,), {})

I have not idea for that, it is still working after I'd upgraded for few days.

Thanks.

RE: WMI Data Source

community@zenoss.org — Thu, 22 Jul 2010 10:10:28 GMT

Hi kimalto,

try to reinstall WMI Data Source Zenpack after Zenoss upgrade.

Egor

RE: WMI Data Source

community@zenoss.org — Thu, 22 Jul 2010 14:16:25 GMT

Thanks your reply, Egor,

I've tried to reinstall and wait the result.

RE: WMI Data Source

community@zenoss.org — Fri, 23 Jul 2010 01:03:06 GMT

Hi Egor,

Same error occurred again after reinstall the WMI data source.

Thanks.

RE: WMI Data Source

community@zenoss.org — Tue, 27 Jul 2010 02:51:03 GMT

Hi Egor,

I'm found then reason finally.

The daemon zeneventlog and zenperfwmi will be stopped after some Windows server has configure wrong WMI logion information.

Attached the log from zenperfwmi daemon:

============================================================================

2010-07-27 09:31:14,884 WARNING zen.WMIClient: Windows login name is unset: please specify zWinUser and zWinPassword zProperties before adding devices.

2010-07-27 09:31:14,885 ERROR zen.zenperfwmi: Device XXXXXX: Username is empty

2010-07-27 09:54:30,925 INFO zen.zenperfwmi: Connecting to localhost:8789

============================================================================

I've configure the userid/pw but the Windows 2000 server cannot be connected by WMI. (I think this is the OS problem, other Windows 2000 and 2003 servers can monitored by WMI plugin.)

After a half hour, I have got this message in Event console: zenperfwmi heartbeat failure.

As I remember, the previous version does not make the daemon down... or the this caused by other error?

Much thanks, Egor.

Kimalto

RE: WMI Data Source

community@zenoss.org — Tue, 27 Jul 2010 14:54:20 GMT

Hi kimalto,

simply restart daemons and after 5 minutes check zenperfwmi.log for errors.

Egor

RE: WMI Data Source

community@zenoss.org — Wed, 28 Jul 2010 00:52:54 GMT

Hi Egor,

The daemon will stopped again and won't restart.

===========================

2010-07-27 16:07:22,361 INFO zen.collector.scheduler: Tasks: 43 Successful_Runs: 83 Failed_Runs: 0 Missed_Runs: 0

2010-07-27 16:10:31,280 INFO zen.zenperfwmi: Deleting PID file /opt/zenoss/var/zenperfwmi-localhost.pid ...

2010-07-27 16:10:31,280 INFO zen.zenperfwmi: Daemon CollectorDaemon shutting down

===========================

As I found if there have error when modeling the device, such as "dcerpc_pipe_connect_b_recv ",

change the production state to "decomissioned" will stop this error and the daemon will not be stopped.

Thanks very much.

RE: WMI Data Source

community@zenoss.org — Mon, 02 Aug 2010 20:46:46 GMT

Egor, I have discoverd an issue and I assume it is in my setup not your zenpack but I wanted to know if anyone else hase seen this. When I used WMIDataSource 1.5 I could test against a device and I would get the correct data. Now with WMIDataSOurce 2.7 running on Zenoss2.51 I get an error

Type: NameError
Value: global name 'messaging' is not defined

Traceback (innermost last):

Module ZPublisher.Publish, line 119, in publish
Module ZPublisher.mapply, line 88, in mapply
Module ZPublisher.Publish, line 42, in call_object
Module ZenPacks.community.WMIDataSource.datasources.WMIDataSource, line 214, in manage_testDataSource

NameError: global name 'messaging' is not defined

Is there something worng with my zenoss install or is this a common issue with the new version of the zenpack.

I could issue the test under the older wmidatasource.

Thanks

Joe

RE: WMI Data Source

community@zenoss.org — Mon, 02 Aug 2010 21:45:24 GMT

Hi Joe,

Thanks for pointing this out. Error fixed on SVN. Please, let me know if it works for you. SVN version of WMIPerf_Windows Zenpack also need some testing, before next release.

Egor

RE: WMI Data Source

community@zenoss.org — Tue, 03 Aug 2010 01:46:10 GMT

Egor I am running Version 2.7 of WMIDataSource is there a newer one that than or are you refering to something else when you sav eht error waas fixed on SVN.?

EDIT: Never mind, I am an Idiot. I found it thanks alot.

Thanks for your help

Joe

RE: WMI Data Source

community@zenoss.org — Tue, 03 Aug 2010 13:38:42 GMT

Thanks for all your help. I think I have discovered a new issue, of course it coluld be me. I patched version 2.7 with the fixes from the svn and the testing works fine but it alos exposed a new issue.

When performing a WQL query of a device with SELECT PercentPrivilegedTime,PercentUserTime FROM Win32_PerfRawData_PerfOS_Processor

I get this returned value:

Get WMI Instance SELECT PercentPrivilegedTime,PercentUserTime FROM Win32_PerfRawData_PerfOS_Processor from //192.168.36.55/root/cimv2

InstanceName: root/cimv2:Win32_PerfRawData_PerfOS_Processor.Name="0"

InstanceName: root/cimv2:Win32_PerfRawData_PerfOS_Processor.Name="_Total"

DONE in 1 seconds

I am able to get this data with WMI Tester.

To test I uninstalled the zenpack and installed WMIDataSOurce1.5 and performed the same query and received this:

Executing command wmic -U './Zenossmonitor'%'*****' //192.168.36.55 --namespace='root\cimv2' "SELECT PercentPrivilegedTime,PercentUserTime FROM Win32_PerfRawData_PerfOS_Processor " against 192.168.36.55

CLASS: Win32_PerfRawData_PerfOS_Processor

Name|PercentPrivilegedTime|PercentUserTime

0|10101024560|25186516432

_Total|10101024560|25186516432

Done in 0 seconds

This is what I expected in version 2.7

Any ideas?

This seems to fail with multiple processor type data but works with other things like memory although it does work for this:

Get WMI Instance SELECT ProcessorQueueLength FROM Win32_PerfRawData_PerfOS_System from //192.168.36.232/root/cimv2

InstanceName: root/cimv2:Win32_PerfRawData_PerfOS_System.

ProcessorQueueLength = 3

DONE in 1 seconds

RE: WMI Data Source

community@zenoss.org — Tue, 03 Aug 2010 13:58:29 GMT

try this query:

SELECT PercentPrivilegedTime,PercentUserTime FROM Win32_PerfRawData_PerfOS_Processor WHERE Name="_Total"

or:

root/cimv2:Win32_PerfRawData_PerfOS_Processor.Name="_Total"

Egor

RE: WMI Data Source

community@zenoss.org — Tue, 03 Aug 2010 14:08:19 GMT

Thanks, that was it. I had used that exact query before but somehow lost it in all my various testing. I was able to get what I needed and now I have a better understanding of the WMI process.

Thanks a lot for all your help.

RE: WMI Data Source

community@zenoss.org — Mon, 23 Aug 2010 19:30:53 GMT

Hello, I have Zenoss 3.0.1 and I'm trying to install WMI Data Source but I cannot view it when I add a new data point. I've installed the zenpack and restarted zenoss but it appears as broken under zenpacks. The error message I get is "attribute getDataSouceClasses" and then it stops. I've noticed that issuing a zenpack --list at the command line shows the zenpack installed but when I try to remove it, it shows as doesn't exist. Any suggestions?

RE: WMI Data Source

community@zenoss.org — Tue, 24 Aug 2010 15:15:04 GMT

RE: WMI Data Source

community@zenoss.org — Wed, 15 Sep 2010 09:13:57 GMT

Just a minor enhancement: When a host has no ip-adress then zenperfwmi crashes. This is certainly not the default case, but I have some hosts configured that have not yet obtained an ip from dhcp. They will eventually and after remodeling all should be fine.

I made a small change to WMIClient.py to check for an empty self.host in connect(). Maybe you can integrate this into your next release.

RE: WMI Data Source

community@zenoss.org — Fri, 17 Sep 2010 18:54:31 GMT

Having a lot of WMI related issues using WMI Data Source. Check the following post for more information:

http://community.zenoss.org/message/52856#52856

RE: WMI Data Source

community@zenoss.org — Mon, 20 Sep 2010 20:07:29 GMT

Follow up, the WMI data showing under "components" added by the WMI Data Source are not showing details. The hard drives are not showing used and free space, no memory level readings and service status is not showing. However all of the CPUs, Interfaces and drives are detected. Is this a client side setting or a configuration tweak that needs to be done to WMI Perf Data and WMI Data Source.

RE: WMI Data Source

community@zenoss.org — Mon, 20 Sep 2010 20:14:11 GMT

You do have the device in /CIM/WMI right? Every device I've tried so far has modelled fine first try. You may need to execute "wmiadap /f" on the servers then reboot them if it's only picking up some of the info.

RE: WMI Data Source

community@zenoss.org — Mon, 20 Sep 2010 20:38:58 GMT

Thanks Ryan.

I don't actually have them in the /CIM/WMI class, but only because I added the wmi modelers to the /Devices/Servers/Windows class - so it should be operating the same as in the /CIM class. I have run the wmiadap /f on a few test servers to see if that changes anything, however given the size of the infrastructure I monitor it's not feasable to run that on all of my windows boxes.

RE: WMI Data Source

community@zenoss.org — Mon, 20 Sep 2010 20:41:38 GMT

I'm pretty sure I remember Egor saying that they have to be in /CIM/WMI for whatever reason. Try moving a device in there and remodel it, see if it makes a difference. After running wmiadap /f you probably have to reboot. If you're having problems on a lot of your devices and it's not feasible to run it then you're kind of stuck.

RE: WMI Data Source

community@zenoss.org — Thu, 07 Oct 2010 12:01:59 GMT

It seems to be the case. Also, it seems we cannot use WMI modelers along with snmp, can we ?

RE: WMI Data Source

community@zenoss.org — Thu, 07 Oct 2010 13:58:04 GMT

It is possible to mix and match modelers for different things, but why on earth would you want to?

RE: WMI Data Source

community@zenoss.org — Thu, 07 Oct 2010 14:06:41 GMT

edit: yes it is possible. With wmi I can monitor services, cpu usage, memory, disk usage, etc.

With snmp I can monitor hardware, fans, power supplies, raid card, and further (using hp snmp agent and appropriate zenpack).

I could do it all with snmp, indeed.

RE: WMI Data Source

community@zenoss.org — Thu, 07 Oct 2010 18:16:09 GMT

Hi martin.sc,

in mixed environment you can use WMIDevice template with /Servers/Windows device class. Simply bind it instead of Device template or rename it to Device.

Egor

RE: WMI Data Source

community@zenoss.org — Thu, 07 Oct 2010 18:27:27 GMT

That's only for performance data though. That doesn't take things like interfaces, filesystems, etc... in to account.

RE: WMI Data Source

community@zenoss.org — Thu, 07 Oct 2010 18:35:01 GMT

My snmp agent from hp does that with hp proliant plugin. I need wmi for windows services and event log. Something that Server/Windows does out of the box, without this zenpack. So for these servers that have the hp snmp configured, I kept the basic Server/Windows class with its original template, that includes snmp and wmi for eventlog and services. Then I added specific HP device components to the devices. For non snmp server, I use the CIM/WMI classe provided here. I think this practice is correct, tell me if i'm wrong.

RE: WMI Data Source

community@zenoss.org — Thu, 07 Oct 2010 19:29:25 GMT

Hi Egor,

your comment is so useful since I just notice that with my setup, I lack CPU and memory graph of the default Server/Windows template. I understood that they are based on snmp informant agent and I run hp agent.

So I need WMI for that as well. WMI for windows services, event log, performance monitoring. HP SNMP for hardware monitoring. I created my servers into Server/Windows, add HP snmp modelers, add community.wmi modelers, assign WMIDevice template. It seems to work well. Now I assume I can/should get rid of a bunch of zenoss.snmp (i already removed zenoss.wmi) or even hp snmp that conflicts with WMI (file system and so). What do you think ?. I also did this on a per device base (I don't have so many devices), maybe not the best practice but as Ryan mentionned I don't want to mess the default class, just in case.

Also, I tried the contrary, that's to say put my devices to CIM/WMI and add HP snmp components. For some reasons it did not work well, for instance temperature graphs won't show or status icon won't change correctly.

RE: WMI Data Source

community@zenoss.org — Tue, 09 Nov 2010 07:04:38 GMT

Hi,

I am using Zenoss 3.0.3 fresh installation and wat to use WMI Winodws Performance Zenpack along with WMI Data Source (as it is WMI Zenpack requisie).I have added the device and move them to /CIM/WMI class as told.

Problems facing are:

1. Not getting the system uptime. Error occured is:

Preparing Command...
Get WMI Instance SELECT LastBootUpTime FROM Win32_OperatingSystem from //10.110.X.X/root/cimv2
Unknown time zone: GMT+051800
DONE in 8 seconds

2. Not getting CPU Load Percentage, just getting number of CPU's ID.

reparing Command...
Get WMI Instance SELECT LoadPercentage FROM Win32_Processor from //10.110.X.X/root/cimv2
InstanceName: root/cimv2:Win32_Processor.DeviceID="CPU0" InstanceName: root/cimv2:Win32_Processor.DeviceID="CPU1" InstanceName: root/cimv2:Win32_Processor.DeviceID="CPU2" InstanceName: root/cimv2:Win32_Processor.DeviceID="CPU3"
DONE in 12 seconds.

3. Not getting any graphs.

Please help....

RE: WMI Data Source

community@zenoss.org — Tue, 09 Nov 2010 20:12:59 GMT

Hi krish,

1. try WMIDataSource 2.10

2. if you test WMI query within WMI Data Source and, your query returned multiple instance, WMI Data Source returned list of instance names, but zenperfwmi daemon will calculate the average value.

Egor

RE: WMI Data Source

community@zenoss.org — Mon, 22 Nov 2010 15:25:41 GMT

So having a strange problem with the zenperfwmi daemon. It has been crashing after a couple of days. I checked the logs and leading up to the failure is a series of errors "NT_TOO_MANY_CONNECTIONS". i did some research into it and I was let to believe therer were too many active connections as an extension of bad ZenHub topology issues. However I went through the ZenHub topology and the logs and topology were correct. It's also not giving any errors around any unknown OIDs.

Back to the zenperfwmi daemon. Logs are now chalk full of "Received NT code 0x80041010 from query:" errors. Now I realize this could be from one of the installed ZenPacks that uses this pack, however I'm including it as it may lead to the issue. That NT code is apparently the result of a misconfigured WMI client, however on the ones that fail in Zenoss they respond correctly to standard WMI queries.

Any ideas of where I should look next or might be overlooking? Thanks. The WMI Data Source reliant ZenPacks I am running are: WMI Exchange 2003, WMI Exchange 2007, WMIPerf_Windows, deviceAdvDetail.

RE: WMI Data Source

community@zenoss.org — Mon, 22 Nov 2010 15:55:12 GMT

That NT code is apparently the result of a misconfigured WMI client, however on the ones that fail in Zenoss they respond correctly to standard WMI queries.

That NT code is the result of a misconfigured WMI on your Windows Server.

RE: WMI Data Source

community@zenoss.org — Sat, 27 Nov 2010 13:39:19 GMT

Thanks Egor, took a harder look at some of the systems complaining and I believe the issue is resolved.

However, I have a bigger problem with zenperfwmi. Both that daemon and the zeneventlog daemon will start filling with "NT_STATUS_TOO_MANY_OPENED_FILES" errors after a couple days. eventually all devices stop responding and the zeneventlog and then zenperfwmi processes will kack and need to be restarted. My only sign that this is happening is an all clear alert from Zenoss saying the issue was resolved by ". Current work around is restarting the zenperfwmi daemon once every couple days. However if I forget to then it only takes 3 days for the crash to occur. Any ideas what might be causing this? Are there too many queries coming from the WMI dependant zenpacks?

RE: WMI Data Source

community@zenoss.org — Sat, 27 Nov 2010 14:26:38 GMT

Hi dclabs,

number of WQL queries you can see, if you run: zenperfwmi run -v10 -d yourserver. By default zenperfwmi configured with 5min collection cycle. So, it realy not much.

Try to restart winmgmt service on your windows server. Note that not only Zenoss can generate wmi requests to your server.

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 19:41:04 GMT

Hi bigegor, does the WMI Data Source support any scripts embedded within the Query? What Language can be used in the query? Python? Bash? Or is it strictly WQL?

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 19:53:40 GMT

Hi solebrad,

'Query' is evaluated as TALES expression. So you can use python in query, o.e:

python:here.osProcessClass().ignoreParameters and "Win32_Process.Name=\"%s\""%here.procName or "Win32_Process.CommandLine=\"%s\""%here.parameters

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 19:59:35 GMT

Alright Thank You. That helps. I've been trying to query a device to return the FreeMegebyte property for multiple drives on that system (can only get one using Name="C:"). I just didn't know what language I can use to manipulate it. Thanks

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 20:03:50 GMT

Note, that you can not send multiple queries at ones. Why not to use Name="_Total"?

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 20:09:57 GMT

That returns the total space available. There's two drives on the device. One has virtually no space left and the other one has roughly 68%. the Name=" _total" doesn't return both values separately so I can't obtain separate data points.

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 20:44:46 GMT

I think, it's not possible. You must create 2 data sources.

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 20:48:33 GMT

I'm not sure I understand. The Windows WMI Performance ZenPack already support windows filesystem monitoring (including usage). It even supports monitoring volumes. Are you attempting to poll values for the actual physical disks themselves?

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 20:49:03 GMT

Is it possible to create 2 data sources that grab data from the same property? How would you do that? Cause I don't think you can have 2 data points share the same name and have two different values. Is this where aliases would be used?

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 20:54:44 GMT

Can you explain what your end goal with this is please?

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 21:04:25 GMT

I am monitoring a domain controller using WMI. I would like to monitor the percentage of free disk space on all available logical volumes on the device. One volume (C:) is at 1% and another volume (D:) is at 67%. I want to return two values so they can be graphed and be measured by a threshold from: SELECT PercentFreeSpace, FreeMegabytes FROM
Win32_PerfFormattedData_PerfDisk_LogicalDisk (WHERE Name="C:" or Name="D:"). The PercentFreeSpace data point can't store these two separate values. I already have the threshold. I just want to know how to execute a query to pull data from multiple drives and map the values to a data point so they can trigger the threshold when the percentage is below 10%. Thank You.

RE: WMI Data Source

community@zenoss.org — Wed, 05 Jan 2011 21:10:35 GMT

So let me get this straight, you want to add up the total space on all of the volumes, and threshold against the total free space on all of them?

So basically threshold against (volumetotal1 + volumetotal2) / (volumeutil1 + volumeutil2)?

...or are you just trying to monitor each logical volume individually?

RE: WMI Data Source

community@zenoss.org — Thu, 06 Jan 2011 12:58:23 GMT

I'm trying to monitor each volume individually.

RE: WMI Data Source

community@zenoss.org — Thu, 06 Jan 2011 15:15:11 GMT

WMI Windows Performance ZenPack supports this.

RE: WMI Data Source

community@zenoss.org — Thu, 06 Jan 2011 15:29:53 GMT

I have that pack installed. Should I override the /CIM/WMI template onto the /Server/Windows device class? That is if this device class has what I need.

Actually, I have moved modeler plugins into the Device class it is located. I'll just wait untill Zenoss collects info for the rest of the machines as well and see if there's any progress. Thank You

RE: WMI Data Source

community@zenoss.org — Thu, 06 Jan 2011 20:45:04 GMT

There's more to it than just modeler plugins, there are also templates. The simplest way would be for you to just put your devices in the /CIM/WMI class.

RE: WMI Data Source

community@zenoss.org — Fri, 21 Jan 2011 19:42:51 GMT

Ok, I must be nearly incompentent. I can NOT figure out how to create a memory threshold for 90% via WMI for my Windows servers. I have tried several different things (90, variants of equations I found online, etc., new data sources to use TotalPhysicalMemory, etc.). It can't be that hard....what am I missing???? Please help!

Thank you all (and Egor, these ZenPacks friggin ROCK!!!)

~Tim

RE: WMI Data Source

community@zenoss.org — Fri, 21 Jan 2011 20:06:36 GMT

The reason it's difficult to make memory thresholds is because the data is collected as bytes, so you would need to do a formula in the threshold itself to make it a dynamic threshold. You may find using my ZenPack easier: http://community.zenoss.org/docs/DOC-1022

Also, just a hint, if you check the graphpoints on the graph, one of them will have a RPN expression (which stands for reverse polish notation). That formula is why the memory graph shows a percentage instead of bytes. The RPN expression is 1024,*,${here/hw/totalMemory},/,1,-,-100,* which can be translated to: (memoryAvailableKBytes * 1024) / here.hw.totalMemory / -1 * -100

RE: WMI Data Source

community@zenoss.org — Fri, 21 Jan 2011 21:52:43 GMT

Ryan,

Thank you so much for helping get me on the right track! I finally figured out that the max value is a python expression, rather than an RPN, and to get 80% memory, I used this formula (in the max field):

(here.hw.totalMemory * .2) / 1024

I now have a threshold which *seems* to be working, as well as a graph which shows the 80% range. I'm going to keep an eye on it over the weekend, but I think that's what I needed.

<edit>

Or not...looks like it shows up on the graph OK, but my maths are off on %. Will work some more, and update later.

</edit>

<edit_2>

Switched the above to this:

(here.hw.totalMemory / 1024) * .8

So now it evaluates correctly, but shows up on the graph at the 20% spot. Odd.

</edit_2>

Thanks again,

Tim

RE: WMI Data Source

community@zenoss.org — Sun, 23 Jan 2011 18:26:42 GMT

Tim, first off, I don't think dividing is required against here.hw.totalMemory, I'm pretty sure that particular value is already stored in bytes. Secondly, that equation is going to return a byte value, where as the graph is showing a percentage value. They are not going to jive unless you adjust the graph to show a byte value instead of a percentage.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 02:41:14 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 08:01:07 GMT

Hi,

i have zenoss3.0.3 installed on VM machine from stack installer. I have installed WMI Data source zenpack with no prerequisites and no problems... So i don't think there is any special procedure. Of course, you should restart zenoss after installing a zenpack...

HTH

Marko

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 11:27:53 GMT

I've been hacking at it for over 8 hours and have restarted zenoss many times. It's just a no-go. Just one comment, most of the *.egg went in OK. (Some didn't.) None of those that have setup.py went in and I can find no log anywhere on the system that they were even executed. Does that offer any insight to what might be happening? Is anything required outside of the installer that zenoss provides. I just don't understand why I'm not getting any errors if the installers are crapping out.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 14:47:42 GMT

First off, install the ZenPacks from the commandline as the zenoss user by using the zenoss --install <filename> command. That will give you better error info when a pack fails to install.

Next, there are a few things to consider when installing ZenPacks. They will come down from the site as .zip files and need to be unzipped to become a .egg file prior to installation.

ZenPacks for Zenoss 3.0 are marked with -py2.6, ZenPacks for Zenoss 2.5 and earlier are marked with -py2.4. ZenPacks that work for both have no -py indication. If you're trying to install packs with the -py2.4 marker then it's not going to work (since I assume you're using Zenoss 3.0).

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 15:02:06 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 15:05:31 GMT

If you could provide some actual output of a ZenPack failing to install it would be helpful in diagnosing the issue.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 15:59:06 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 16:59:00 GMT

http://community.zenoss.org/docs/DOC-9401

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 17:04:07 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 19:03:11 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 19:05:53 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 19:16:53 GMT

can you post exact command which you are using for ZenPack installation?

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 19:53:18 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 19:55:44 GMT

you must install ZenPacks.community.WMIDataSource-2.11.egg FILE but NOT directory.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 19:58:36 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 20:00:30 GMT

don't copy it to /opt/zenoss/ZenPacks

RE: WMI Data Source

community@zenoss.org — Mon, 24 Jan 2011 20:04:42 GMT

Yeh, copying it to /opt/zenoss/ZenPacks will cause problems, since that's where it's going to try to install it to.

RE: WMI Data Source

community@zenoss.org — Thu, 27 Jan 2011 06:35:19 GMT

Content deleted.

RE: WMI Data Source

community@zenoss.org — Thu, 27 Jan 2011 21:53:09 GMT

Ryan,

Sorry for the late response, but I *FINALLY* got it to work! Had to add a MINIMUM value, as the AvailableKBytes is free memory, not utilized memory. Anywho, here's the value:

(here.hw.totalMemory / 1024) * .2

Once I did that (and added the threshold to the graph), everything is working GREAT! Thank you again for your time, and for pointing me in the right direction.

Tim (tags to find this easier later on: WMI, Memory Utilization, Threshold)

RE: WMI Data Source

community@zenoss.org — Thu, 03 Feb 2011 23:11:32 GMT

Can anybody help me understand the following documentation. For Example If I Query this:

SELECT startmode FROM Win32_Service WHERE name="Spooler" OR name="PlugPlay"

How do you setup the two different datapoints to reflect the different startmodes on Spooler or PlugPLay

Queries sorting (join multiple queries in one query)

Example: Device has 4 CPUs (components)
- DataSource Query for CPU1: CIM_Processor.DeviceID="CPU0"
- DataSource Query for CPU2: CIM_Processor.DeviceID="CPU1"
- DataSource Query for CPU3: CIM_Processor.DeviceID="CPU2"
- DataSource Query for CPU4: CIM_Processor.DeviceID="CPU3"
Result query: CIM_Processor
- Instance.DeviceID="CPU0" -> DataPoints from DataSource CPU1
- Instance.DeviceID="CPU1" -> DataPoints from DataSource CPU2
- Instance.DeviceID="CPU2" -> DataPoints from DataSource CPU3
- Instance.DeviceID="CPU3" -> DataPoints from DataSource CPU4
4 queries will be replaced by 1 query

RE: WMI Data Source

community@zenoss.org — Sun, 06 Feb 2011 21:44:06 GMT

Hi rklingaman,

this example shows how to zenperfwmi daemon processing WMI quries. So, you must create two datasources:

1: SELECT startmode FROM Win32_Service WHERE name="Spooler"

2: SELECT startmode FROM Win32_Service WHERE name="PlugPlay"

Egor

RE: WMI Data Source

community@zenoss.org — Mon, 14 Mar 2011 16:25:10 GMT

Hi - can anyone help? I've installed the ZenPacks needed, but cannot for the life of me get the File Systems Component to report the disk space in use. I was using the default plugin zenoss.snmp.HRFileSystemMap but got odd behaviour with some disks not reporting for periods of time and repeated Debug Events logged "Error reading value for "usedBlocks" on...". I thought it may be better to use WMI, but am now getting the following in the zenperfsnmp Logs. I can SNMPwalk, SNMPget with the correct OIDs etc etc and am now going in circles as to what the problem is with WMI. I am using only WMI plugins now. Thanks.

2011-03-14 16:02:41,405 ERROR zen.zenperfsnmp: invalid literal for int() with base 10: 'Win32_Volume'
Traceback (most recent call last):
  File "/usr/local/zenoss/zenoss/Products/ZenRRD/zenperfsnmp.py", line 136, in checkException
    return function(*args, **kw)
  File "/usr/local/zenoss/python/lib/python2.6/site-packages/pynetsnmp/twistedsnmp.py", line 241, in get
    oids = [asOid(oidStr) for oidStr in oidStrs]
  File "/usr/local/zenoss/python/lib/python2.6/site-packages/pynetsnmp/twistedsnmp.py", line 103, in asOid
    return tuple([int(x) for x in oidStr.strip('.').split('.')])

RE: WMI Data Source

community@zenoss.org — Mon, 14 Mar 2011 16:29:28 GMT

Somehow you are mixing up SNMP and WMI templates. This pack is designed to work with the WMI Performance Monitor ZenPack. Install that pack, move your devices to /CIM/WMI class and remodel them. Just to add, if you were doing the SNMP monitoring properly with the correct SNMP templates you should be getting valid data. It sounds like you're mixing and matching templates/plugins that you shouldn't be.

RE: WMI Data Source

community@zenoss.org — Mon, 14 Mar 2011 16:45:12 GMT

Thanks for the speedy reply! I can't see how to move devices to other classes - only assign templates to the device - am I missing something? There doesn't seem to be a template specifically bound for the WMI FileSystem??

RE: WMI Data Source

community@zenoss.org — Mon, 14 Mar 2011 17:17:14 GMT

You move them by going to the infrastructure section and just dragging

the device to a class.

RE: WMI Data Source

community@zenoss.org — Mon, 14 Mar 2011 17:45:11 GMT

Right - silly me - okay - now getting disk space reporting. Question though - can I create a new Device Class within Server/Windows that has the same functionality as the /CIM/WMI class as this is getting a little messy with the seperate Class folder/sub folder?

RE: WMI Data Source

community@zenoss.org — Mon, 14 Mar 2011 17:55:16 GMT

You can but you'll have to copy every WMI template over and make sure

that the zProperties and plugins are the same as the /CIM/WMI class.

RE: WMI Data Source

community@zenoss.org — Tue, 15 Mar 2011 17:21:33 GMT

Sorry to be a pain - can you tell me how to copy the templates over - I can't seem to work it out? I can group the Monitoring Templates by Template or Class, but can't get my head around how to make a device use a WMI template rather than an SNMP one. For example there seem to be 4 FileSystem Templates of which some apply to CIM/WMI (WMI) and some to /Server (SNMP).

RE: WMI Data Source

community@zenoss.org — Thu, 17 Mar 2011 10:14:10 GMT

Right - I get it now - this is not as simple as it should be really.

Using Zenoss 3 - very different WebUI...

For me it is pretty confusing that you can add Templates to Devices and Devices Classes under the Configuration Properties (zDeviceTemplates) - this is entirely different to binding Templates to the Device Class in which the device is.

This much I sort of understood, however what really got me is that no matter how you look at the Monitoring Templates, there didn't seem to be a way to move/bind/copy them. The key word here is "Override".

The answer is simple when you know how:

1. In Advanced > Monitoring Templates, decide which way you want to view the Templates - group by Templates or Device Class. In my case I want to mix both SNMP HP/Dell Tempates bound to the Server Device Class, and the WMI Templates bound to the CIM/WMI/Win2000 Device Class, so I am grouping by Device Class.

2. I created a new Device Class under Server/Windows called WindowsWMI.

3. Highlight each Template within the CIM/WMI/Win2000 Class and it's parent Class CIM/WMI and choose Override Template from the Actions button at the bottom and set the target to the new Device Class.

4. Move the server to the new Device Class and remodel.

N.B. make sure there are no locally defined Templates in the Device Class or the device itself that may cause problems, and that all the Configuration Properties are correct. In my case I only have the Device template in ZDeviceTemplates for the Device Class. You will also still need to define the ZenPack Plugins in the Device Class Configuration Properties (zCollector Plugins) in the correct order (see below).

I now have reporting on all the SNMP hardware components and all the WMI components as well - without errors.

Plugins in use for HP Servers in order (not 100% double-checked - but seems to work for me so far):

community.wmi.NewDeviceMap
community.wmi.DeviceMap
community.wmi.ProcessorMap
community.wmi.InterfaceMap
community.wmi.ProcessMap
community.wmi.DiskDriveMap
community.wmi.WinServiceMap
zenoss.portscan.IpServiceMap
community.wmi.ProductMap
community.wmi.RouteMap
community.wmi.VolumeFileSystemMap
community.snmp.HPCPUMap
community.snmp.HPDaCntlrMap
community.snmp.HPDaPhyDrvMap
community.snmp.HPDaLogDrvMap
community.snmp.HPDeviceMap
community.snmp.HPFanMap
community.snmp.HPFcTapeCntlrMap
community.snmp.HPFcaCntlrMap
community.snmp.HPFcaHostCntlrMap
community.snmp.HPFcaLogDrvMap
community.snmp.HPFcaPhyDrvMap
community.snmp.HPIdeAtaDiskMap
community.snmp.HPMemoryModuleMap
community.snmp.HPIdeControllerMap
community.snmp.HPIdeLogicalDriveMap
community.snmp.HPNicMap
community.snmp.HPPowerSupplyMap
community.snmp.HPSasPhyDrvMap
community.snmp.HPSsChassisMap
community.snmp.HPTemperatureSensorMap
community.snmp.HPScsiPhyDrvMap
community.snmp.HPScsiCntlrMap
community.snmp.HPSm2CntlrMap
community.snmp.HPScsiLogDrvMap
community.snmp.HPSasLogDrvMap
community.snmp.HPSasHbaMap
community.snmp.HPExpansionCardMap
community.snmp.HPLogicalDiskMap
community.snmp.HPHardDiskMap

RE: WMI Data Source

community@zenoss.org — Thu, 17 Mar 2011 13:59:17 GMT

Yeh, I've been opposed to the term "Override" instead of "Copy" since the first 3.x release. It didn't even have the ability to copy templates until 3.1 when a patch that I submitted was refined/integrated by the devs.

RE: WMI Data Source

community@zenoss.org — Fri, 01 Apr 2011 14:46:29 GMT

Hi, I have just implemented the WMIDATASource into our new 3.1.0 install after using SNMP in the past. Is it possible to change the cycle time for zenperfwmi to 60 seconds?

thanks

Glen

RE: WMI Data Source

community@zenoss.org — Fri, 01 Apr 2011 14:51:43 GMT

As I recall it uses the "SNMP Performance Cycle Interval (secs)" collector value to determine it's cycle time. Egor can correct me if I'm wrong. WMI is no where near as lightweight as SNMP though (and much more unstable), so prepare for more overheard and a lot of crying. We only use WMI in a very targetted fashion when absolutely needed. Otherwise we use SNMP as it is much more reliable.

RE: WMI Data Source

community@zenoss.org — Tue, 17 May 2011 19:07:31 GMT

I have a quest regarding data point names for multiple instances within a single class. My query is as follows:

SELECT RPCAverageLatency FROM Win32_MSExchangeISClient

This query returns the RPCAverageLatency for 21 different instances within the MSExchangeISClient class. I want to be able to graph all 21 of those instances separately. (Not the average or sum. Just one graph with 21 lines...) How do i setup data points for the RPCAverageLatency for each of those 21 instances? Is this possible? Or do i need to create separate data sources for each instance and add a "WHERE name='Instance'" to the query above? I was hoping there was a way to name the data points so i just the the RPCAverageLatency for a single instance using a single data source. (To keep things neat)

Thanks for your help.

RE: WMI Data Source

community@zenoss.org — Sun, 26 Jun 2011 18:14:47 GMT

Hi!

Huh, "Add comment" link is really small and not easily spoted.

Now, to the problem (client linux, host Vista):

$ wmic -U user%pass //x.x.x.x -d99 "Select * from Win32_ComputerSystem"
[param/loadparm.c:587:init_globals()] Initialising global parameters
[param/loadparm.c:2462:lp_load()] lp_load: refreshing parameters from /dev/null
[param/params.c:556:pm_process()] params.c:pm_process() - Processing configuration file "/dev/null"
[param/loadparm.c:2471:lp_load()] pm_process() returned Yes
[param/loadparm.c:1343:lp_add_hidden()] adding hidden service IPC$
[param/loadparm.c:1343:lp_add_hidden()] adding hidden service ADMIN$
[auth/credentials/credentials_krb5.c:171:cli_credentials_set_ccache()] failed to get principal from default ccache: No such file or director
y: open(/tmp/krb5cc_507): No such file or directory
[auth/auth.c:447:auth_register()] AUTH backend 'winbind_samba3' registered
[auth/auth.c:447:auth_register()] AUTH backend 'winbind' registered
[auth/auth.c:447:auth_register()] AUTH backend 'name_to_ntstatus' registered
[auth/auth.c:447:auth_register()] AUTH backend 'fixed_challenge' registered
[auth/auth.c:447:auth_register()] AUTH backend 'unix' registered
[auth/auth.c:447:auth_register()] AUTH backend 'anonymous' registered
[auth/auth.c:447:auth_register()] AUTH backend 'sam' registered
[auth/auth.c:447:auth_register()] AUTH backend 'sam_ignoredomain' registered
[auth/gensec/gensec.c:1229:gensec_register()] GENSEC backend 'krb5' registered
[auth/gensec/gensec.c:1205:gensec_register()] gensec subsystem fake_gssapi_krb5 is disabled
[auth/gensec/gensec.c:1229:gensec_register()] GENSEC backend 'schannel' registered
[auth/gensec/gensec.c:1229:gensec_register()] GENSEC backend 'spnego' registered
[auth/gensec/gensec.c:1205:gensec_register()] gensec subsystem gssapi_spnego is disabled
[auth/gensec/gensec.c:1229:gensec_register()] GENSEC backend 'gssapi_krb5' registered
[auth/gensec/gensec.c:1229:gensec_register()] GENSEC backend 'gssapi_krb5_sasl' registered
[auth/gensec/gensec.c:1229:gensec_register()] GENSEC backend 'ntlmssp' registered
[lib/com/dcom/main.c:528:dcom_determine_rpc_binding()] Using binding ncacn_ip_tcp:x.x.x.x
[librpc/rpc/dcerpc_connect.c:513:continue_map_binding()] Mapped to DCERPC endpoint 135
[librpc/rpc/dcerpc.c:1366:dcerpc_ndr_request_send()] rpc request data:
[librpc/rpc/dcerpc.c:1429:dcerpc_ndr_request_recv()] rpc reply data:

[000] 00 00 00 00                                       ....
[lib/com/dcom/main.c:413:determine_rpc_binding_continue2()] dcerpc_ndr_request_recv returned NT_STATUS_OK
[lib/com/dcom/main.c:417:determine_rpc_binding_continue2()] IObjectExporter::ServerAlive returned NT_STATUS_OK
[auth/gensec/gensec.c:599:gensec_start_mech()] Starting GENSEC mechanism spnego
[auth/gensec/gensec.c:599:gensec_start_mech()] Starting GENSEC submechanism gssapi_krb5
[auth/gensec/gensec_gssapi.c:304:gensec_gssapi_client_start()] Cannot do GSSAPI to an IP address
[auth/gensec/gensec.c:606:gensec_start_mech()] Failed to start GENSEC client mech gssapi_krb5: NT_STATUS_INVALID_PARAMETER
[auth/gensec/gensec.c:599:gensec_start_mech()] Starting GENSEC submechanism ntlmssp
[auth/ntlmssp/ntlmssp_client.c:128:ntlmssp_client_challenge()] Got challenge flags:
[auth/ntlmssp/ntlmssp.c:72:debug_ntlmssp_flags()] Got NTLMSSP neg_flags=0x628a8205
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_CHAL_ACCEPT_RESPONSE
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_CHAL_TARGET_INFO
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
[auth/credentials/credentials_ntlm.c:130:cli_credentials_get_ntlm_response()] NTLMSSP challenge set by NTLM2
[auth/credentials/credentials_ntlm.c:131:cli_credentials_get_ntlm_response()] challenge is:
[000] A3 B5 84 96 35 B7 AE 92                           ....5...
[auth/ntlmssp/ntlmssp_client.c:242:ntlmssp_client_challenge()] NTLMSSP: Set final flags:
[auth/ntlmssp/ntlmssp.c:72:debug_ntlmssp_flags()] Got NTLMSSP neg_flags=0x60088205
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
[librpc/ndr/ndr_string.c:214:ndr_pull_string()] long string ''
[librpc/rpc/dcerpc.c:1366:dcerpc_ndr_request_send()] rpc request data:
[000] 05 00 01 00 00 00 00 00 00 00 00 00 2A 8A AE 6F ........ ....*..o
[010] FF 49 6F 45 A1 7B A7 EF 3D CF 19 DD 00 00 00 00 .IoE.{.. =.......
[020] 5E F0 C3 8B 6B D8 D0 11 A0 75 00 C0 4F B6 88 20 ^...k... .u..O..
[030] 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ........ ........
[040] 01 00 00 00 00 00 02 00 01 00 00 00 18 AD 09 F3 ........ ........
[050] 6A D8 D0 11 A0 75 00 C0 4F B6 88 20 03 00 00 00 j....u.. O.. ....
[060] 03 00 00 00 07 00 0F 00 0C 00                    ........ ..
[librpc/rpc/dcerpc.c:849:dcerpc_request_recv_data()] rpc fault: DCERPC_FAULT_ACCESS_DENIED
[wmi/wmic.c:196:main()] ERROR: Login to remote object.
NTSTATUS: NT_STATUS_ACCESS_DENIED - Access denied
$

As you see, this is different than other "access denided" messages, which are mostly related to wrong credentials or insufficient privileges of used user. In my case, authentication is ok, and privileges. And i can see this in "security" log of host.

After a week of pulling my hair out, i did manage to track this down to UAC. It seems that UAC is trying to display message to accept action, but because it is remotely initiated, he just denies access. One possible fix is to disable UAC, but i guess, this is not so goot thing. So, as alternative: http://www.howtogeek.com/howto/windows-vista/enable-mapping-to-hostnamec-share-on-windows-vista/

I hope this will save week of life for someone else.

RE: WMI Data Source

community@zenoss.org — Wed, 13 Jul 2011 11:10:59 GMT

Hi Egor - great ZenPack.

We have a small issue. Some of our Windows clients respond quirkily - sometimes they respond, sometimes they don't - it's not a fundamental comms problem.

On the Zenoss server we are gradually seeing CPU, memeory, disk and network! increase over a period of a few days. Looking in zenperfwmi.log, messages saying <number> Failed_Runs: <number> Missed_Runs with the numbers increasing. Eventually there are a large number of NT_STATUS_TOO_MANY_OPENED_FILES messages. Shortly after the daemon dies and needs manually restarting.

Does your datacollector attempt lots of retries on failed WMI requests, which might explain the increasing resources??? Any other ideas??

Many thanks,

Jane

RE: WMI Data Source

community@zenoss.org — Wed, 13 Jul 2011 13:22:15 GMT

You may already know this Jane, but if your windows clients are Server 2008 SP1 then you're going to have tons of problems with WMI. The most stable WMI systems that I've seen are Server 2003 and Server 2008 SP2. Server 2008 SP1 servers are nothing but headaches for WMI.

RE: WMI Data Source

community@zenoss.org — Wed, 13 Jul 2011 21:10:42 GMT

Hi Jane,

zenperfwmi daemon has number of problems with memory usage and WMI Errors processing and will be deprecated in next WMI Data Source Zenpack release (WMI Queries will be processed by zenperfsql daemon from SQL DataSource ZenPack http://community.zenoss.org/people/bigegor/blog/2011/06/14/sqldatasource-zenpack-20-beta4).

Egor

RE: WMI Data Source

community@zenoss.org — Wed, 13 Jul 2011 21:32:32 GMT

Thanks Egor,

Does your WMI Data Source 2.83 beta have these patches? If we are currently in a development environment, wouldyou suggest trying the new beta?

Many thanks,

Jane

RE: WMI Data Source

community@zenoss.org — Wed, 13 Jul 2011 21:44:34 GMT

Hi Jane,

yes, you can try it. It is stable enough for a development environment.

Egor

RE: WMI Data Source

community@zenoss.org — Fri, 29 Jul 2011 21:15:42 GMT

Any problems with 2008 R2 SP1?

RE: WMI Data Source

community@zenoss.org — Sun, 18 Sep 2011 15:34:49 GMT

Receiving this error when quering WMI. Any ideas?

Preparing Command...

exception while executing command

type: value: exceptions must be classes or instances, not NoneType

Exception while performing command:

Traceback (most recent call last): File "/opt/zenoss/Products/ZenUI3/browser/command.py", line 120, in stream self.reportError) File "/opt/zenoss/ZenPacks/ZenPacks.community.WMIDataSource-2.11.egg/ZenPacks/community/WMIDataSource/datasources/WMIDataSource.py", line 206, in testDataSourceAgainstDevice write('DONE in %s seconds' % long(time.time() - start)) UnboundLocalError: local variable 'start' referenced before assignment

RE: WMI Data Source

community@zenoss.org — Thu, 27 Oct 2011 14:14:11 GMT

Hi I'm currenlty getting the same error with 2.11 installed have you found any solution.

keith

RE: WMI Data Source

community@zenoss.org — Mon, 07 Nov 2011 19:12:58 GMT

Question - do the set of community zenpacks that provide for WMI based monitoring support pure NTLMv2 based authentication, Egor? Or is that on the roadmap to be provided in a coming release?

I'm doing a proof-of-concept in an environment where the Windows servers are all set to disallow NTLMv1 or LM (LAN Manager) authentication ... from my struggling with this, and research over the past couple of days, it appears that the Zenoss Enterprise edition handles this cleanly - and licensing Enterprise will certainly be an option considered go forward. But it would be irresponsible to not consider Zenoss Core, if it could also provide for the needed features.

RE: WMI Data Source

community@zenoss.org — Tue, 29 Nov 2011 09:47:56 GMT

Morning All, I have been getting this error from my WMI monitoring for some time now, but have never found the offending machine.

ERROR zen.hub: Unhandled exception in zenhub service ZenPacks.community.WMIDataSource.services.WmiPerfConfig.WmiPerfConfig: 'totalBlocks'

From the Zenhub logs:

2011-10-19 10:52:04,722 ERROR zen.hub: Unhandled exception in zenhub service ZenPacks.community.WMIDataSource.services.WmiPerfConfig.WmiPerfConfig: 'totalBlocks'

Traceback (most recent call last):

File "/opt/zenoss/Products/ZenCollector/services/config.py", line 84, in _wrapFunction

return functor(*args, **kwargs)

File "/opt/zenoss/ZenPacks/ZenPacks.community.WMIDataSource-2.11.egg/ZenPacks/community/WMIDataSource/services/WmiPerfConfig.py", line 134, in _createDeviceProxy

device)

File "/opt/zenoss/ZenPacks/ZenPacks.community.WMIDataSource-2.11.egg/ZenPacks/community/WMIDataSource/services/WmiPerfConfig.py", line 98, in getWbemDeviceConfig

threshs = getWbemComponentConfig(trs, device, queries, datapoints)

File "/opt/zenoss/ZenPacks/ZenPacks.community.WMIDataSource-2.11.egg/ZenPacks/community/WMIDataSource/services/WmiPerfConfig.py", line 70, in getWbemComponentConfig

extra={'now':'now'})

File "/opt/zenoss/Products/ZenUtils/ZenTales.py", line 33, in talesEval

res = compiled(getEngine().getContext(contextDict))

File "/opt/zenoss/lib/python/zope/tales/expressions.py", line 261, in __call__

v = var(econtext)

File "/opt/zenoss/lib/python/zope/tales/expressions.py", line 217, in __call__

return self._eval(econtext)

File "/opt/zenoss/lib/python/Products/PageTemplates/Expressions.py", line 127, in _eval

ob = self._subexprs[-1](econtext)

File "/opt/zenoss/lib/python/zope/tales/expressions.py", line 124, in _eval

ob = self._traverser(ob, element, econtext)

File "/opt/zenoss/lib/python/Products/PageTemplates/Expressions.py", line 76, in boboAwareZopeTraverse

object = object.restrictedTraverse(name)

File "/opt/zenoss/lib/python/OFS/Traversable.py", line 310, in restrictedTraverse

return self.unrestrictedTraverse(path, default, restricted=True)

File "/opt/zenoss/lib/python/OFS/Traversable.py", line 293, in unrestrictedTraverse

raise e

KeyError: 'totalBlocks'

Any advice, suggestions, or questions would be greatly apprciated.

Thanks

Sav

RE: WMI Data Source

community@zenoss.org — Tue, 13 Mar 2012 13:15:48 GMT

hi, i'm testing zenoss alpha 4.x and it's not compatible with this zenpack because miss pysamba.twisted.reactor so how can i remove successfully zenperfwmi before upgrade reverting to old zenperfwmi daemon, exist a recovery procedure?

can i make a succesfully zenpack uninstall and restore original zenperfwmi daemon?

RE: WMI Data Source

community@zenoss.org — Wed, 14 Mar 2012 19:53:59 GMT

Hi Andrea,

i'll replace WMIDataSource, WBEMDataSource and ZenODBC ZenPacks with universal SQLDataSource ZenPack ( https://github.com/epuzanov/ZenPacks.community.SQLDataSource ), for backward compatibilit reasons i've made special versions (wrappers) of WMIDataSource and WBEMDataSource ZenPacks, you can find they here: http://community.zenoss.org/people/bigegor/blog/2011/10/26/sqldatasource-zenpack-20-beta5

RE: WMI Data Source

community@zenoss.org — Tue, 01 May 2012 07:20:40 GMT

I've installed the version 3 and now, i get this error popping up in the event console:

methodCall	_createDeviceProxy((,), {})
traceback	Traceback (most recent call last): File "/usr/local/zenoss/zenoss/Products/ZenCollector/services/config.py", line 86, in _wrapFunction return functor(args, *kwargs) File "/usr/local/zenoss/zenoss/ZenPacks/ZenPacks.community.WMIDataSource-3.0-py2

Thanks for your awesome work!

Fred

RE: WMI Data Source

community@zenoss.org — Wed, 02 May 2012 18:44:18 GMT

Hi Fred,

this error really confused me. WMIDataSource 3.0 doesn't have 'configurationService'. Maybe old WMIDataSource ZenPack was not completely removed.

RE: WMI Data Source

community@zenoss.org — Fri, 18 May 2012 08:24:14 GMT

Hi Egor,

First of all these zenpacks are fantastic and we have been using them very successfully for several months. Thank-you fo all your work.

I have just upgraded the WMIDataSource from 2.11 to 3.0 and whilst almost everything is still working as expected, thesholds no longer seem to raise events when exceeded. In particular the FileSystem thresholds do not raise an alert. Data is being collected properly and the graph is updated, and the values are correct but the thresholds just do not get checked as far as I can tell.

We have no errors in zenperfsql.log and all tasks are being run so I am at a bit of a loss as to where to look to start troubleshooting this. I have tried deleting and re-adding the devices, clearing the RRDs and performed a reindex() in zendmd but as you can tell this is just clutching at straws :-(

Do you are anyone on this forum have an tips as to where I can start to look to debug this issue?

Many thanks,

Nick.

RE: WMI Data Source

community@zenoss.org — Sun, 20 May 2012 18:09:19 GMT

Hi Nick,

update SQL Data Source to latest version (2.1)

RE: WMI Data Source

community@zenoss.org — Mon, 21 May 2012 12:48:43 GMT

Hi Egor,

Thanks for such a swift update and response. I have updated to v2.1, but unfortuantely the thresholds are still not triggering :-(

There are no errors in zenperfsql.log or zenhub.log and I don't see any errors when running zenperfsql in debug mode either.

Could you suggest where I look next to try to get to the bottom of this?

Many thanks,

Nick.

RE: WMI Data Source

community@zenoss.org — Fri, 25 May 2012 16:23:13 GMT

Hi Egor,

Thanks for the awesome ZenPack!

I'm running into the same issue with no alerts being triggered, using SQLDataSource 2.2 and WMIDataSource 3.0 on an Ubuntu based install of Zenoss 3.2.1. I had originally installed SQLDataSource 2.0 and upgraded it in place, is this a workable upgrade path?

Edit: I can reinstall Zenoss if required to support this, so was wondering what version you use to develop and test these ZenPacks?

-Charles

RE: WMI Data Source

community@zenoss.org — Fri, 25 May 2012 17:01:45 GMT

Hi Charles,

1. zenperfsql sends events.

2. to check this run as zenoss user: zenperfsql run -v10 -d yourserverhere

RE: WMI Data Source

community@zenoss.org — Tue, 05 Jun 2012 02:38:10 GMT

Hi, first of all thanks for this ZenPack! I'm currently replacing our old Zenoss system and utilising the WMI queries utilised by some older scripts with the functionality from this ZenPack.

Our old scripts relied on Nagios output from customised WMI providers installed on our servers. Question: Can I still use the Nagios style output from the WMI providers with this ZenPack?

Otherwise, our alternative is to update the custom WMI providers to provide output in integer format directly. Thanks!

RE: WMI Data Source

community@zenoss.org — Thu, 07 Jun 2012 08:33:39 GMT

Hi - I have the same problem as Nick. We're running WMIDataSource 3.0 and SQLDataSource 2.2. Any help would be much appreciated. Thanks.

RE: WMI Data Source

community@zenoss.org — Thu, 07 Jun 2012 12:20:01 GMT

Hi Jez, Egor,

I got things working with the older variants on Zenoss 2.5. The 3.x versions collected data correctly but never generated alerts (even when running zenperfsql manually). I have not yet had a chance to track down the bug in the source code on GitHub, but do plan to take a look as I'd rather be running Zenoss 3.2.1.

-Charles

RE: WMI Data Source

community@zenoss.org — Fri, 08 Jun 2012 09:28:33 GMT

Hi Charles,

Thanks - installed WMI 2.11 again and all working. We're on Zenoss version 3.2.1 by the way - works fine.

Will keep an eye ont things and report back - upgrading to WMI v 3 was the start of a lot of problems with disk space not creating events at 90%, intermittent graphs and problems with Daemons not running.

Cheers,

Jez

RE: WMI Data Source

community@zenoss.org — Fri, 08 Jun 2012 09:43:00 GMT

Blimmey - getting all sorts of alerts now. We also had a sysUpTime critical alert to warn us of servers not being patched and rebooted in over 60 days not reporting. I think there are some pretty serious issues with this latest version.

RE: WMI Data Source

community@zenoss.org — Sun, 10 Jun 2012 17:49:03 GMT

Hi Chaz,

can you provide some output examples (and WQL query too) from your cusomized WMI provider?

RE: WMI Data Source

community@zenoss.org — Sun, 10 Jun 2012 17:54:02 GMT

Hi Charles,

if you have a chance to track down the bug, plase do it. Bug reports is good, but patches is much better

RE: WMI Data Source

community@zenoss.org — Mon, 11 Jun 2012 21:29:12 GMT

Hi Charles, Jez,

try latest SQLDataSource from my github repository (version 2.2.1)

RE: WMI Data Source

community@zenoss.org — Wed, 13 Jun 2012 23:42:33 GMT

Thanks for the reply Egor.

I will try to dig it out from our devs but at this stage I think I got it working by editing the zenperfwmi.py to automatically translate the expected query output to integer. It was just a simple status code.

RE: WMI Data Source

community@zenoss.org — Tue, 07 Aug 2012 22:39:30 GMT

Pardon my newbiness, but I am trying to use this to monitor if a particular file changes in size. This isn't really for integrety checking or any sort of security standpoint, but just to make sure a specific file on specific systems is the appropriate size as when we do certain installers the file is changed and not correcting it with our specific version has serious issues for some applications.

I created the following wmi search, and it functions perfectly via wmic(name of the file has been changed, I don't care about the actual pagefile =) )

SELECT Name,FileSize FROM CIM_DataFile WHERE FileName = 'pagefile' and Extension = 'sys'

I created a data source with Name "FileSize", Namespace "root/cimv2" and put that Query in it. When I test I get the following response which looks promising:

Preparing Command...

Get WMI Instance SELECT Name,FileSize FROM CIM_DataFile WHERE FileName = 'pagefile' and Extension = 'sys' from //10.0.254.243/root/cimv2

InstanceName: root/cimv2:Win32_PageFile.Name="c:\pagefile.sys" FileSize = 4290772992

DONE in 5 seconds

I then created a Data Point with Name "FileSize", RRD Type "Absolute", RRD Minimum "0" and left everything else the default.

I then created a Graph named "FileSize", Units "Bytes" and everything else is the defaults, now when I go to Graphs it shows up, the FileSize shows up as nan and the threshold appears normally. I also attempted to make a Threshold so if the size reported was > 500 it would generate an event, which also never gets generated. What am I doing wrong? I know I have to be missing something fairly simple but I'm just not seeing it.

RE: WMI Data Source

community@zenoss.org — Wed, 08 Aug 2012 00:17:33 GMT

Hi Duncan,

you must wait 15 min (3 collection cycles), if this doesn't help than restart zenoss and wait another 15 min.

RE: WMI Data Source

community@zenoss.org — Mon, 20 Aug 2012 14:50:18 GMT

Hi Egor,

I'm running Zenoss 3.2.1 and I have troubles with this ZenPack.
I have WMIDataSource 3.0 and SQLDataSource 2.2.

When I do a SQL query, everything works fine.
When I do a WMI query, zenperfsql daemon crashes.

I've tried with this query "SELECT LoadPercentage FROM CIM_Processor"

If I do it directly on Zenoss' host, the query works. (wmic -U domain/user%password //server "SELECT LoadPercentage FROM CIM_Processor")
I've the same account in Zenoss.(configuration properties)

When I do a test in Zenoss I've this:
Preparing Command...
Executing query: "SELECT LoadPercentage FROM CIM_Processor "
Results:

Then the daemon crashes.
In zenperfsql's log (in debug mode), the last lines look like this
2012-08-20 16:41:23,763 DEBUG zen.zenperfsql: Connected to servername [X.X.X.X]
2012-08-20 16:41:23,764 DEBUG zen.collector.scheduler: Task servername 300 248110724 changing state from CONNECTING to FETCH_DATA
2012-08-20 16:41:23,764 DEBUG zen.zenperfsql: Datasource wmi/testwmi query:'SELECT LoadPercentage FROM CIM_Processor

I've tried with WMIDataSource 2.11 alone, and the query works fine.
With SQLDataSource and the newest version of WMIDataSource, it looks like it tries do do my query as a SQL query.

Do you have any idea?

Thanks.

RE: WMI Data Source

community@zenoss.org — Tue, 21 Aug 2012 18:25:04 GMT

So, how is the support for Zenoss Core v.4 on this package? how to install?

RE: WMI Data Source

community@zenoss.org — Tue, 21 Aug 2012 18:27:48 GMT

Zenoss Core 4 comes with the Enterprise WMI package. They released it to the community. This pack is no longer required with 4.

RE: WMI Data Source

community@zenoss.org — Tue, 21 Aug 2012 19:02:13 GMT

Alright, that's what I though. Couldn't see any wmi config on server

properties, and neither any details you normally see fetching details with

wmi from servers added.

2012/8/21 Ryan Matte <community@zenoss.org>

**
Zenoss Community <http://community.zenoss.org/index.jspa> WMI Data
Source new comment by Ryan Matte<http://community.zenoss.org/people/rmatte> View
all comments on this document<http://community.zenoss.org/docs/DOC-3392#comment-5998>

RE: WMI Data Source

community@zenoss.org — Wed, 12 Sep 2012 21:14:42 GMT

I'd like to confirm that I am also seeing that the thresholds fail to function. I think this applies to all thresholds based on the WMI data source (using the perfsql daemon). I am using the latest versions of all Zenpacks (WMIDS 3.0, SQLDS 2.3, WMI Perf 2.5.8).

I am thinking it's probably something to do with the "_safeGetComponentConfig" function in "SqlPerformanceConfig.py" (SQL DS Zenpack) but i haven't yet been able to track down the issue.

Thanks BTW for all of your great work. I'm sure it goes unmentioned but I for one depend on it a great deal.

Joseph

RE: WMI Data Source

community@zenoss.org — Thu, 13 Sep 2012 14:30:45 GMT

Wanted to follow up that i've found the problem, but not the solution yet.

In SqlPerformanceConfig.py, the last line of the _getComponentConfig function contains the line:

return comp.getThresholdInstances(self.dsType)

Which should be evauated as return comp.getThresholdInstances('WMI') in the case of WMI data, but this is being evaulated as "SQL" instead, thus returning no thresholds.

RE: WMI Data Source

community@zenoss.org — Thu, 13 Sep 2012 14:51:49 GMT

The quick and dirty fix is to modify line 164 from:

return comp.getThresholdInstances(self.dsType)

to:

return comp.getThresholdInstances(self.dsType) + comp.getThresholdInstances('WMI')

which will cause the thresholds to be picked up.

The better solution is to have the "dsType" variable in the class to be set depending on the template data source (It's hard-coded to "SQL" at the top of the file).

Thanks,

Joseph

RE: WMI Data Source

community@zenoss.org — Sun, 16 Sep 2012 16:32:58 GMT

Hi Joseph,

thanks for your comments, i've fixed SQL Data Source Zenpack (version 2.4)

RE: WMI Data Source

community@zenoss.org — Wed, 06 Mar 2013 21:01:29 GMT

question moved

RE: WMI Data Source

community@zenoss.org — Tue, 19 Mar 2013 10:59:48 GMT

Hello @ all!

First of all i want to thank you egor for the amazing zen packs.

I found the new ZenPack and tried to install it. This works fine, but after installing i didn't get any informations or error messages if a service crash! I also installed the SQL Part. When i start the SQL Service in Zenoss, it works for 2 minutes and then the service stops. Has anyone an idea for me?

Currently i'm runi9ng following Zenoss with the following Zenpacks:

3.2.x on a Suse Installation!

installed Zenpacks:

WMIDataSource 3.0
WMIPerf_windows2.5.80
SQLDataSource2.4

If you need more Informations or Logfiles plaes let me know

Best regards

Khelben