An unknown status means that the service control manager on the remote host did not return any valid service status. This usually happens under the following circumstances: The remote computer is running an operating system other than Windows. The remote computer is unreachable e.g. turned off firewall etc.. The network connecti...
Yes you can install the heartbeat service on multiple computers and configure all of them to write their heartbeat information to the same database. Please note that the Heartbeat Status web page may show incomplete results until all agents have performed at least one monitoring cycle. A KB on how to install Heartbeat on a remote compu...
The heartbeat monitoring agent is designed to be installed only on a small number of hosts usually one. It is not necessary and recommended to install the heartbeat agent on multiple computers. The heartbeat monitoring agent will ping and monitor all configured computers from one central location. If you have a large number of computers t...
This happens when the user account the heartbeat service is running under does not have privileges to query the EventSentry service status on the remote hosts. This is due to enhanced operating system security for all Windows versions starting with Windows Server 2003 SP1 and Windows Vista. You can solve this problem by A Running the Eve...
This problem appears when you have one or more duplicate computers in your configuration. Check your entire configuration and make sure that there is no computer and/or IP address that appears more than once. A computer and/or IP address should not appear more than once even when located in different groups. You will only have to check groups...
To resolve this problem you will need to stop the EventSentry Heartbeat agent and delete the temporary file used by the service. Please follow the instructions below: 1. Open the EventSentry management application 2. Click on Service Control 3. Click the stop in the Heartbeat Agent Control area 4. Using the find option of Windows loca...
The OS will usually log an Audit Failure similar to the one shown below when a process e.g. the heartbeat monitoring agent tries to read the service status: Object Server: SC Manager Object Type: SERVICE OBJECT Object Name: EventSentry Handle ID: Operation ID: 026249353 Process I...
Yes you can configure the EventSentry Heartbeat Monitor service to run under the NETWORK SERVICE account for increased security. Follow the steps below to reconfigure the service: 1. Using regedit.exe navigate to: x86 system: HKLM\Software\netikus.net\EventSentry x64 system: HKLM\Software\Wow6432Node\netikus.net\EventSent...
The subject of EventSentry emails is highly customizable using standard variables e.g. HOSTNAME as well as insertion string variables STR1 STR2 .... Since heartbeat alerts include the name of the host for which the status changed you can determine which insertion to use with the Event Message Browser. In the management consol...
When configuring authentication in the heartbeat agent it is important that you are logged in with the same user account under which the EventSentry Heartbeat Monitor service is running under. Otherwise the passwords will not be accessible and you39ll receive Access Denied errors. 1 Make sure the EventSentry Heartbeat Monitor service...
When configuring authentication in the heartbeat agent it is important that you are logged in with the same user account under which the EventSentry Heartbeat Monitor service is running under. Otherwise the passwords will not be accessible and you39ll receive Unable to find or decrypt stored authentication credentials errors. 1 Make su...
The EventSentry Heartbeat Monitor service requires administrator rights on the EventSentry server. If the account being used to run this service does not have administrator rights the EventSentry configuration cannot be read and Error 1610: The configuration data for this product is corrupt will be displayed when attempting to start the hear...
Run the following commands in the terminal: Update package list: sudo apt update Install SNMP: sudo apt install snmpd Next the configuration file for the SNMP daemon snmpd.conf needs to be adjusted. A manual page is located here link to https://netsnmp.sourceforge.net/docs/man/snmpd.conf.html which contains information for additio...
Run the following commands in the terminal: Update all packages: sudo yum checkupdate Install SNMP: yum y install netsnmp Next we need to configure multiple entries in the snmpd.conf there is a manual page located here link to http://netsnmp.sourceforge.net/docs/man/snmpd.conf.html which contains information for additional conf...
In EventSentry 3.3 series and newer there are multiple ways to check the agent status and they are performed in this order: Read collector connections Read database activity Request agent status via RPC Starting in EventSentry 4.2.3.132 and onwards if the collector is enabled these are the checks for the agent status and the orde...
Your device must support SNMPget sometimes referred to as SNMP polling and must be able to accept incoming connections on UDP port 161. If your device has its own firewall settings Linux Mac ESXi certain network devices you39ll need to unblock SNMP and/or unblock UDP 161 inbound in your device39s firewall settings in addition to allowing ...
EventSentry has a unique timerfilter feature that can suppress unnecessary alerts if the error condition only lasts for a configurable short period of time. This can be applied to alerts about hosts being down services being stopped and more. In this HowTo we will use the example of heartbeat events which can sometimes generate unnecessa...
If you receive an error message similar to the one shown below then we recommend that you first restart the EventSentry Heartbeat Service to see if that resolves the issue. If the seemingly incorrect alerts comes back then you need to change the size of the desktop heap in Windows. Run regedit.exe and navigate to the following ke...
The maximum scan time is a setting in the Heartbeat service that determines how long the service will scan a device for SNMPget data and wait for a response. If a device doesn39t respond within the maximum scan time then scan will be interrupted. If this happens several times in a row the heartbeat service will log a 11012 event: Scanni...
How can I install the Heartbeat agent on a separate computer/machine EventSentry39s Heartbeat agent can be installed on a different computer/machine separate from the rest of your EventSentry installation. You can even install a second heartbeat agent in addition to your original. You may wish to do this to split resources across machine...
