thirdParty : Windows SNMP Service Monitor : Comments

RE: Windows SNMP Service Monitor

community@zenoss.org — Thu, 19 Jan 2012 04:09:28 GMT

Hi Ryan,

How about the modeler plugin community.wmi.WinServiceMap? Do I need to remove it?

If it is removed, it seems that the Windows event log could not be collected.

Could these two modeler plugins co-exist?

Thnaks.

RE: Windows SNMP Service Monitor

community@zenoss.org — Thu, 19 Jan 2012 14:48:06 GMT

That plugin has nothing to do with event log monitoring. The configuration property that affects event log monitoring is zWinEventlog. zWmiMonitorIgnore may affect it as well.

I would recommend disabling the community.snmp.WinServiceMap plugin since there's no point in monitoring Windows services 2 different ways.

RE: Windows SNMP Service Monitor

community@zenoss.org — Tue, 24 Jan 2012 09:01:08 GMT

That's great, thanks very much Ryan you've made my day :-)

I've tried other products such as WhatsUpGold but the cost implications are through the roof when you can use an open source application such as Zenoss, just requires a lot of tinkering.

RE: Windows SNMP Service Monitor

community@zenoss.org — Tue, 24 Jan 2012 17:32:26 GMT

It requires tinkering but the level of flexibility is much higher than other commercial products that I've seen.

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 25 Jan 2012 01:50:33 GMT

I will try it Ryan, I have been mucking with wmi unsuccessfully for a couple months now. By the way I love your snmp vm monitor zernpack showing cpu utilization and memory. If I can use this with it...wow. fantastic. Gimme a week to install and provide feedback.

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 25 Jan 2012 05:37:57 GMT

Ryan,

I installed this zenpack. Install went fine on ver3.2

The zenwinsrvsnmp daemon started fine and like you mention I had gui errors.

So I did a reboot, and I have 3 quad processor boxes in /server/windows 4 processors.

I remodeled all 3. All are identical boxes, same snmp mibs, etc.

2 of the 3 now are picking up the windows services but 1 is not.

There is no "Windows Services" showing up under components.

The new zproperties are there for this 1 box.

But when I remodel this particular box this is what I get. I see at the end it says "no change in configuration detected"

Ideas?

2012-01-25 00:30:37,442 INFO zen.ZenModeler: Connecting to localhost:8789

2012-01-25 00:30:37,463 INFO zen.ZenModeler: Connected to ZenHub

2012-01-25 00:30:37,521 INFO zen.ZenModeler: Collecting for device xxxxx

2012-01-25 00:30:37,719 INFO zen.ZenModeler: No WMI plugins found for xxxxx

2012-01-25 00:30:37,734 INFO zen.ZenModeler: No Python plugins found for xxxxx

2012-01-25 00:30:37,742 INFO zen.ZenModeler: No command plugins found for xxxxxxxxx

2012-01-25 00:30:37,757 INFO zen.ZenModeler: SNMP collection device xxxxxxx

2012-01-25 00:30:37,758 INFO zen.ZenModeler: plugins: zenoss.snmp.NewDeviceMap, zenoss.snmp.DeviceMap, HPDeviceMap, DellDeviceMap, zenoss.snmp.InterfaceMap, zenoss.snmp.RouteMap, zenoss.snmp.IpServiceMap, zenoss.snmp.HRFileSystemMap, zenoss.snmp.HRSWInstalledMap, zenoss.snmp.HRSWRunMap, HPCPUMap, DellCPUMap, DellPCIMap, zenoss.snmp.InformantHardDiskMap, community.snmp.WinServiceMap

2012-01-25 00:30:37,908 INFO zen.ZenModeler: No portscan plugins found for xxxxxxx

2012-01-25 00:31:14,188 INFO zen.SnmpClient: snmp client finished collection for xxxxxx

2012-01-25 00:31:14,189 INFO zen.ZenModeler: Processing zenoss.snmp.NewDeviceMap for device xxxxx

2012-01-25 00:31:14,189 INFO zen.ZenModeler: processing zenoss.snmp.DeviceMap for device xxxxxx

2012-01-25 00:31:14,190 INFO zen.ZenModeler: Modeler zenoss.snmp.InterfaceMap processing data for device xxxxxx

2012-01-25 00:31:14,195 INFO zen.ZenModeler: processing zenoss.snmp.RouteMap for device xxxxx

2012-01-25 00:31:14,252 INFO zen.ZenModeler: processing zenoss.snmp.IpServiceMap for device xxxxx

2012-01-25 00:31:14,267 INFO zen.ZenModeler: Modeler zenoss.snmp.HRFileSystemMap processing data for device xxxxxx

2012-01-25 00:31:14,267 INFO zen.ZenModeler: Skipping A:\. 0 total blocks.

2012-01-25 00:31:14,267 INFO zen.ZenModeler: Skipping D:\. 0 total blocks.

2012-01-25 00:31:14,267 INFO zen.ZenModeler: Skipping Physical Memory (ram) as it matches zFileSystemMapIgnoreTypes.

2012-01-25 00:31:14,268 INFO zen.ZenModeler: processing zenoss.snmp.HRSWInstalledMap for device xxxxxx

2012-01-25 00:31:14,278 INFO zen.ZenModeler: Processing zenoss.snmp.HRSWRunMap for device xxxxxxx

2012-01-25 00:31:14,281 INFO zen.ZenModeler: processing HPCPUMap for device xxxxxxx

2012-01-25 00:31:14,281 INFO zen.ZenModeler: processing DellCPUMap for device xxxxxxx

2012-01-25 00:31:14,282 INFO zen.ZenModeler: processing DellPCIMap for device xxxxxx

2012-01-25 00:31:14,282 INFO zen.ZenModeler: processing zenoss.snmp.InformantHardDiskMap for device xxxxxxx

2012-01-25 00:31:14,282 INFO zen.ZenModeler: Modeler community.snmp.WinServiceMap processing data for device xxxxxxx

2012-01-25 00:31:15,178 INFO zen.ZenModeler: No change in configuration detected

2012-01-25 00:31:15,242 INFO zen.ZenModeler: Scan time: 37.72 seconds

2012-01-25 00:31:15,256 INFO zen.ZenModeler: Daemon ZenModeler shutting down

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 25 Jan 2012 12:36:55 GMT

Try moving that server from the class that it's currently in to a different class and then back to it's original class. See if that fixes it. There was someone else having the same issue and that did the trick.

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 25 Jan 2012 13:58:27 GMT

thank you Ryan that fixed it.

Hopefully today I will play around with the bottom half of of the "Windows Services" screen. I dont know if that is your code or zenoss but I am hoping I can graph or create a report showing red/green icons for up down state of a specific service?

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 25 Jan 2012 17:59:01 GMT

My code does not integrate with the existing Zenoss Windows Services code at all. I had looked at the code and determined that it would be basically impossible to integrate. In terms of a report, I'll add that to a list of things for the next release.

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 25 Jan 2012 21:11:07 GMT

Ryan,

Thanks for your work on this. Quick question: does this zenpack require the entry of credentials for an admin account on the monitored machine?

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 25 Jan 2012 21:17:23 GMT

Nope, it's purely SNMP based, just requires an SNMP community string (zSnmpCommunity).

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 25 Jan 2012 21:18:23 GMT

Very cool, thanks for the info.

RE: Windows SNMP Service Monitor

community@zenoss.org — Thu, 26 Jan 2012 07:05:47 GMT

Hi!

Big deal!

But I see one strange.

I continue to receive events "service is down" even if I set "Monitor these components" to off.

RE: Windows SNMP Service Monitor

community@zenoss.org — Thu, 26 Jan 2012 13:42:45 GMT

Try restarting the daemon to refresh the monitoring configuration.

RE: Windows SNMP Service Monitor

community@zenoss.org — Fri, 27 Jan 2012 10:04:30 GMT

Hi Ryan,

Could it be possible to have the indvidual monitor interval (1min) for monitoring Windows services and have the SNMP Performance Cycle Interval (5mins) for collecting perf data respectively?

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 30 Jan 2012 16:53:25 GMT

I'll look in to it, but it may end up being more complicated than worth doing.

RE: Windows SNMP Service Monitor

community@zenoss.org — Sat, 04 Feb 2012 14:50:00 GMT

I get alert on some of the windows machines that says:

Windows service '' is stopped

Any idea?

RE: Windows SNMP Service Monitor

community@zenoss.org — Sat, 04 Feb 2012 17:39:57 GMT

That shouldn't even be possible. The way those events get generated is when a threshold event gets generated under the /Status/WinServiceSNMP class.

The transform on that class is as follows:

if evt.summary.startswith('threshold of WinServiceSNMPStatus'):

if evt.severity > 0:

evt.summary = "Windows service '%s' is stopped" % (evt.component)

evt.message = "Windows service '%s' is stopped" % (evt.component)

else:

evt.summary = "Windows service '%s' is running" % (evt.component)

evt.message = "Windows service '%s' is running" % (evt.component)

The only way I can see that happening is if you had a threshold event using that class that came in with no component set on it. You could remove or modify that transform to see what event is causing that.

The built in WMI service monitoring events look identical. Verify that it's actually coming in for /Status/WinServiceSNMP and not for /Status/WinService.

Make sure the device was properly modeled (make sure you see services).

RE: Windows SNMP Service Monitor

community@zenoss.org — Sun, 05 Feb 2012 21:01:00 GMT

I deleted the devices that had this and added them again. now the problem is gone...

RE: Windows SNMP Service Monitor

community@zenoss.org — Sun, 05 Feb 2012 22:15:48 GMT

One more thing Ryan

I had a problem with this zenpack, and there one other guy that seemed to have the same problem, you can read about in here.

http://community.zenoss.org/message/64261#64261

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 06 Feb 2012 18:58:31 GMT

Explain in that forum post in detail what you did to produce the error and I'll take a look. It sounds like a bug with Zenoss more than with this pack, but you never know.

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 06 Feb 2012 19:01:34 GMT

Oh I think I see what's going on here. You guys aren't understanding what "Reset Bindings" actually does. Why are you clicking "Reset Bindings" to begin with? That option clears all templates bound to a device/class, which is why you would no longer see any.

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 06 Feb 2012 19:14:47 GMT

Hmm, but even after i moved the device to a other device class (like ping) and move it back, and take model device its still lik,e that. Should not that fix that problem?

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 06 Feb 2012 19:20:01 GMT

Not if you did "Reset Bindings" right on the device itself. It becomes a local setting on the device. You then need to go in to Configuration Properties for the device and delete the local copy of zDeviceTemplates to allow it to inherit the list of templates from the class instead of locally. I would recommend never to use "Reset Bindings" unless you know what you're doing. There is an option to Bind Templates rather than Reset Bindings. That's the one you should be using. In most cases you'll want to bind templates to a class, not to individual devices.

RE: Windows SNMP Service Monitor

community@zenoss.org — Tue, 07 Feb 2012 14:50:06 GMT

I see, i guess you learn new stuff everyday.

Well then i can aswell ask one more thing. i get alerts/clears of a WinHTTP Web Proxy Auto-Discovery Service. I have tried disable checking of that service under "Windows Service"->Enable monitoring->Set local value-No, for that service. But i still get this alerts/clears.

RE: Windows SNMP Service Monitor

community@zenoss.org — Tue, 07 Feb 2012 15:11:37 GMT

Hi Fisk,

I have the same problem, but there's another way to disable monitoring for specifc services using the ZenPack.

Go to "Configuration Properties" -> "Misc \ zWinServiceSNMPIgnoreNames" and enter any services you don't want to monitor seperated by line then re-run "Model Device".

RE: Windows SNMP Service Monitor

community@zenoss.org — Tue, 07 Feb 2012 16:21:11 GMT

Please carefully read the instructions that I typed up on this page. Specifically the "ZPROPERTIES" section. It explains how to omit services from monitoring. This pack is in no way integrated with the built in Zenoss WMI Windows Services monitoring system. I looked at the code and found that it would be extremely complicated to do and not worth it in the end. Instead, you just make a list of the names of the services that you want to omit and put them in zWinServiceSNMPIgnoreNames line by line. You then remodel the devices and it'll ignore them.

The way I've done this is actually beneficial as it allows for specific services to be ignored/monitored in specific classes, which the existing services system does not allow for.

I also highly recommend locking the services after you are satisfied with them to prevent them from being removed if a service is down while the device is being remodeled.

(This was meant to be directed at fisk)

RE: Windows SNMP Service Monitor

community@zenoss.org — Sat, 28 Apr 2012 20:13:39 GMT

I like the Zenpack, being able to monitor services without wmi.

The only problem I have is that by default all services it finds it sets to being monitored. Is there a way to change it so all services discovered, monitoring is disabled by default.

I just started using this Zenpack, I add devices and disable all services discovered, then enable only the services I want to monitor. The problem I think I am having is that Zenoss does modeling every few hours, and if a service like virtual disk happens to be running during the auto remodeling, this service gets set to being monitored, then soon this service stops, and I get alerts at 12am in the morning for a service I did not want to monitor.

Update:

Just after posting I think I figured out a sort of work around.

After reading over Ryan's instructions a few more times.

What I do is:do my initial modeling.

Delete all services I do not want to monitor.

Lock all the services I do want to monitor.

Then Enable under configuration:

zWinServiceSNMPMonitorNamesEnable to True

Then remodel once again.

Now I only show the services I have locked.

And new services do not appear during schedule modeling.

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 30 Apr 2012 15:35:39 GMT

Yes, that's the way to do it. With zWinServiceSNMPMonitorNamesEnable set to True you can also add the names of those services line by line to zWinServiceSNMPMonitorNames which will ensure that only those services get discovered. If you're wanting to monitor the same services on a large group of devices that zProperty is the best way to do it.

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 25 Jun 2012 11:11:22 GMT

Hi - I am getting the same issue with the same service. I've added it to the zWinServiceSNMPIgnoreNames property for the device class. This should work shouldn't it? Or does the entry need to be in speech marks on seperate lines?

--> Update - I did not remodel, so this may be working.

Can I also ask - the zWinServiceSNMPMonitorNamesEnable used to enable/disable - set to false is enabled I presume?

Cheers,

Jez

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 25 Jun 2012 15:52:49 GMT

You need to add the service name exactly as displayed with no leading or trailing spaces. The service should be on it's own line in zWinServiceSNMPIgnoreNames (list the services line by line). Leave zWinServiceSNMPMonitorNamesEnable as False unless you want to use the zWinServiceSNMPMonitorNames field to explicitly select services to monitor. After you have added the service to zWinServiceSNMPIgnoreNames you need to remodel the device. Make sure that service is not locked when remodeling.

RE: Windows SNMP Service Monitor

community@zenoss.org — Mon, 25 Jun 2012 15:54:07 GMT

zWinServiceSNMPMonitorNamesEnable toggles the use of zWinServiceSNMPMonitorNames. If it is set to True then zWinServiceSNMPMonitorNames is in use. What this means is unless a service is specified in zWinServiceSNMPMonitorNames it will not be monitored. Most people will want to leave that disabled and just use zWinServiceSNMPIgnoreNames.

RE: Windows SNMP Service Monitor

community@zenoss.org — Fri, 03 Aug 2012 18:29:48 GMT

I am getting this error when the template is bound. Graphs don't show up at all. Sometimes I have to dismiss the window but it always pops up when ever I do anything on a device with this template.

This is a new fresh install of 3.2.1.

The server reported the following error: AttributeError getUIPath

RE: Windows SNMP Service Monitor

community@zenoss.org — Tue, 07 Aug 2012 15:05:42 GMT

You're not supposed to bind the template to the device (unbind it). It's not designed to be a device template. It automatically gets bound to the service components.

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 05 Sep 2012 01:41:42 GMT

Just an announcement that I have updated the pack to work with Zenoss 4. Download version 1.1 of the pack (py2.7).

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 10 Oct 2012 17:08:34 GMT

Thanks for the update, I am successfully using the new version with Zenoss 4.

I have a quick question though. Is it possible to somehow wildcard a service name? For example, I have a few SQL servers with several instances running which all have a different service name. ie: "SQL Server (INSTANCE1), SQL Server (INSTANCE2) and so forth. I'm wondering if there is a way to setup a group to monitor all "SQL Server *" instances.

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 10 Oct 2012 17:22:18 GMT

That is not currently possible. I'll look in to doing this in the next release. For now you'd have to use the ignore list and set all other services to be ignored except those.

RE: Windows SNMP Service Monitor

community@zenoss.org — Sat, 19 Jan 2013 01:14:28 GMT

This Zenpack is great, thanks!

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 23 Jan 2013 17:54:04 GMT

Is it possible to automatically ignore all services with Startup Type=Manual?

RE: Windows SNMP Service Monitor

community@zenoss.org — Wed, 23 Jan 2013 17:57:40 GMT

No because the service startup type doesn't get presented via SNMP. Zenoss just picks up any services that are running on the server at the time of modeling. You need to identify the most common manual startup processes and add them to the ignore list.