Julian, 'Compaq Physical Drive' is not configured to show graphs I think. I'm using the poller group 'Storage Device' to check disksize. Is the SNMP-service correctly configured? I think you need to enable the 'Physical agent' (default is disabled).
About the events: EventID 529 This event record indicates an attempt to log on using an unknown user account or a valid user account but with an incorrect password. An unexpected increase in the number of these audits could represent an attempt by someone to find user accounts and passwords (such as a "dictionary" attack, in which a list of words is used by a program to attempt entry). Common causes for invalid logon events: - Forgotten passwords, someone is entering the wrong password. - An unauthorized individual is trying to gain access to the network. - There is a persistent network connection with an invalid password. - There is a service using a user account with an invalid password. - Trust relationship has been broken. (source EventID.NET) EventID 680 http://www.eventid.net/display.asp?eventid=680&eventno=2267&source=Security&; phase=1 Ruud -----Oorspronkelijk bericht----- Van: Julian Castaño Restrepo [mailto:[EMAIL PROTECTED] Verzonden: dinsdag 28 februari 2006 17:38 Aan: [EMAIL PROTECTED] CC: jffnms-users@lists.sourceforge.net Onderwerp: RE: [jffnms-users] RE: User JFFNMS Thanks for your answer, I had installed the UPHC and thanks the messages stopped. I had checked the command diskperf and it shows that is enable, I force the enable for the row counters with diskperf -y but anyway when I go to check the graphs for the hard disks drives it shows me the following message: Error: No Interface Graphs were returned. And when I run rrd-analizer for each one of both hard disks, it doesn't show me anything The poller group for both disks is Compaq Physical Drive. Other thing is that I had added another host (a win xp box just for testing the tool) but for this host I get this pair of annoying messages in the event view, 15 times at the same time. Feb 28 11:04:23 security[failure] 529 NT AUTHORITY\SYSTEM Error al iniciar sesión: Razón:Nombre de usuario desconocido o contraseña incorrecta Feb 28 11:04:23 security[failure] 680 NT AUTHORITY\SYSTEM Inicio de sesión intentado por: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Cuenta de inici I don't understand why is this happening. thanks in advance. Julian C. >From: Ruud Hop <[EMAIL PROTECTED]> >To: "'jffnms-users@lists.sourceforge.net'" ><jffnms-users@lists.sourceforge.net> >Subject: [jffnms-users] RE: User JFFNMS >Date: Tue, 28 Feb 2006 10:12:17 +0100 > > > From: [EMAIL PROTECTED] > > To: jffnms-users@lists.sourceforge.net > > Date: Mon, 27 Feb 2006 20:41:22 +0100 > > Subject: [jffnms-users] User JFFNMS > > > > Hi all, > > > > First thanks for this helpful tool, well I had installed JFFNMS in a win > > 2k3, and 'till now I just testing this same box, but I'm planning to >monitor > > an Iseries platform. In this moment I have this question, why or for >what >is > > necessary to create the jffnms user, I'm asking this because in the >event > > viewer I'm receiving too many events like this > > 9>Feb 27 14:00:30 userenv: NT AUTHORITY\SYSTEM Windows saved user > > MDEZTI01W3\JFFNMS registry while an application or service was still >using > > > the registry during log off. The (ID:1517) > > > > And I think this is because the user jffnms so I don't know what could > > happen If I just run the scheduled tasks from the admin user from where >I > > > had installed jffnms. > >This is a windows problem. Search for UPHClean on the Microsoft support >site. > > > > > Other thing that I'm not sure is I got graphs for almost all interfaces >but > > for the two hard disks I don't get anything. Why is that happening any > > suggest would be great. > >Did you enable performance monitoring on your disks with the command >diskperf? > > > > > Thanks in advance for the help, > > > > >Ruud > > >------------------------------------------------------- >This SF.Net email is sponsored by xPML, a groundbreaking scripting language >that extends applications into web and mobile media. Attend the live >webcast >and join the prime developer group breaking into this new coding territory! >http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 >_______________________________________________ >jffnms-users mailing list >jffnms-users@lists.sourceforge.net >https://lists.sourceforge.net/lists/listinfo/jffnms-users _________________________________________________________________ Acepta el reto MSN Premium: Protección para tus hijos en internet. Descárgalo y pruébalo 2 meses gratis. http://join.msn.com?XAPID=1697&DI=1055&HL=Footer_mailsenviados_proteccioninf antil ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642 _______________________________________________ jffnms-users mailing list jffnms-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jffnms-users
