|
| | | 
Forum Guru
 
Group: Forum Members
Last Login: 12/20/2008 9:09:35 PM
Posts: 51, Visits: 82 |
| | Hi all, I see where a while back, there were a couple of reports of difficulties with trying to get the SYSLOG report back from WUG. I'm having a similar issue now. I have one device in particular (Dial-In Access Server), that I have customized the SNMP Traps and SYSLOG reporting it sends to WUG so I don't get everything it's capable of sending (mainly looking for ACL and connection activity), and it's sending quite a bit of data as expected. WUGv8 SYSLOG reporting handled it just fine, but not so well with WUGv12. Prior to upgrading to v12.3, it took a while to get the reports, but they would eventually be displayed and without too many hassles (it did chew up the processing power, but only for less than 15 minutes), but it's so bad now with v12.3, that even with a PC which has a 2.0GHz CPU, and 2GB of RAM and over 300GB of drive space, get's locked up bad enough that nothign works until it presents you with an error message about the report possibly taking so long and IE becoming unresponsive (an IE error I believe), but even clicking on NO to terminate the request, for a simple two hour period which is only about 150 lines long out of a total of 734K lines on the "dbo.PassiveMonitorActivityLog", eventually fails and never displays the report locking the PC up completely (I even have to go so far as hard booting the PC to regain control over it again!). Did something change fundamentally with regards of how quickly an SQL dB query script on the SYSLOGS will work on a server with over 4GB of RAM and dual 3.6GHz Processors, that it now makes this vital function in WUG no longer function? I'm in really bad need of pulling the SYSLOG data for a management report now, and can't get it done as a result of this issue.... any ideas on how to set up a custom query or thru the MS SQL Server Manager Studio Express tool to be able to pull the reports I'm after? Any ideas or help would be appreciative- Thanks!
------------------------------------------------------------
Bryan Harrell
Network Infrastructure - Tallahassee
Fla. Dept of Revenue
------------------------------------------------------------ |
| |
| | | Junior Member
Group: Forum Members
Last Login: 11/11/2008 10:49:21 AM
Posts: 10, Visits: 36 |
| Hi Harrell!
I've had the same problem a while ago, but mine was due the returning row number was so high that I had to decrease the limit to 100. To do this, just go to the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Ipswitch\WebServer\WhatsUp
There is a value called "MaxRecords" from where the ASP file takes the limit number. Modifying it you'll get less records and IE won't get stuck (bear in mind to do it in Decimal, NOT in HEX!).
Also, I wanted the whole (or almost) message in the report, even though I had to scroll right to see it in the page, but at least in this way you will be able to use the "Find" function of IE to look for data. This can be easily done by modifying the file _RptSyslogEntries.inc located in:
C:\Program Files\Ipswitch\WhatsUp\HTML\NmConsole\Reports\Full\System\ProblemAreas\RptSyslogEntries
and tune the parameter:
oTable.AddColumn("Payload",1100);
and changing this line:
varsShortenedPayload = ShortenPayload(sParsedPayload);
with this one:
varsShortenedPayload = sParsedPayload;
I hate to "hack" the code and the registry, but we really miss the way WU Pro 2006 worked in this aspect....
Remember: make BACKUP of everything you touch before you touch it!
I hope this helps. Regards,
KNX |
| |
| | |
Forum Guru
Group: Forum Members
Last Login: 12/20/2008 9:09:35 PM
Posts: 51, Visits: 82 |
| KoNXuRo (10/29/2008)
Hi Harrell!
I've had the same problem a while ago, but mine was due the returning row number was so high that I had to decrease the limit to 100. To do this, just go to the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Ipswitch\WebServer\WhatsUp
There is a value called "MaxRecords" from where the ASP file takes the limit number. Modifying it you'll get less records and IE won't get stuck (bear in mind to do it in Decimal, NOT in HEX!).
Also, I wanted the whole (or almost) message in the report, even though I had to scroll right to see it in the page, but at least in this way you will be able to use the "Find" function of IE to look for data. This can be easily done by modifying the file _RptSyslogEntries.inc located in:
C:\Program Files\Ipswitch\WhatsUp\HTML\NmConsole\Reports\Full\System\ProblemAreas\RptSyslogEntries
and tune the parameter:
oTable.AddColumn("Payload",1100);
and changing this line:
varsShortenedPayload = ShortenPayload(sParsedPayload);
with this one:
varsShortenedPayload = sParsedPayload;
I hate to "hack" the code and the registry, but we really miss the way WU Pro 2006 worked in this aspect....
Remember: make BACKUP of everything you touch before you touch it!
I hope this helps. Regards,
Thanks for the reply KoNXuRo... I'll have to give it a try and see if it helps at all...my fear is that I will spend my day working my way thru the log file a hundred lines at a time, or miss some if the number of lines in the time frame exceeds 100, but I'll play with the number and see what I can figure out (maybe double that, 250, or 1000 might be more appropriate given the default value I found was 10,000... May your day be blessed!
------------------------------------------------------------
Bryan Harrell
Network Infrastructure - Tallahassee
Fla. Dept of Revenue
------------------------------------------------------------ |
| |
| | | Junior Member
Group: Forum Members
Last Login: 11/11/2008 10:49:21 AM
Posts: 10, Visits: 36 |
| ey Mate!
Another thing you can try is to run this query, and tune it to adapt to your needs:
SELECT * FROM PassiveMonitorActivityLog
WHERE (sSource like '%172.69.14.252%' AND sPayload LIKE '%permitted%' AND sPayload LIKE '%VLAN9%');
I hope if you accurate the info you need, the query may result less time-consuming...
I think it's worth to give it a try, isn't it?
Regards,
KNX
KNX |
| |
|
|