Hello,

We are getting warnings from Windows logs and notifications get sent in 
Check_MK for this,,
while in Windows this seems to be a "succesfull" informational event.

So we are alerting people, while there is no need to :-(

(1) Mismatch in severity
   - in Check_MK: WARNING 0.7023 HealthService The specified session name is 
already in use.)
   - in Windows EventViewer: Informational: The Health Service has downloaded 
secure configuration for management group 
AOI-086c8d5b-13a7-4106-bfd7-cc9ad6162014 successfully.


(2) Mismatch in description
   - in Check_MK: 0.7023 HealthService The specified session name is already in 
use.)
   - in Windows EventViewer: The Health Service has downloaded secure 
configuration for management group AOI-086c8d5b-13a7-4106-bfd7-cc9ad6162014 
successfully.


More detailed info for this case (it's an Azure Windows machine):

Log Name: Operations Manager
with this event:
---------------> start winevent log on Windows eventviewer <-----
Log Name:      Operations Manager
Source:        HealthService
Date:          2/8/2018 1:52:35 AM
Event ID:      7023
Task Category: Health Service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      the.server.net
Description:
The Health Service has downloaded secure configuration for management group 
AOI-086c8d5b-13a7-4106-bfd7-cc9ad6162014 successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
  <System>
    <Provider Name="HealthService" />
    <EventID Qualifiers="0">7023</EventID>
    <Level>0</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-02-08T00:52:35.581147200Z" />
    <EventRecordID>922</EventRecordID>
    <Channel>Operations Manager</Channel>
    <Computer>awe-app-010.ADAGILITY.NETthe.server.net</Computer>
    <Security />
  </System>
  <EventData>
    <Data>AOI-086c8d5b-13a7-4106-bfd7-cc9ad6162014</Data>
  </EventData>
</Event>
--> end winevent log on Windows eventviewer <-----

In Check_mk we are sending notifications with :
SERVICE NOTIFICATION     the.server.net Log Operations Manager WARN - 4 WARN 
messages
(Last worst: Feb 08 01:52:35 0.7023 HealthService The specified session name is 
already in use.)


kind regards,
Herman



_______________________________________________
checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
http://lists.mathias-kettner.de/mailman/listinfo/checkmk-en

Reply via email to