NSClient++ Help (#1) - Windows XP (#965) - Message List

Windows XP

I can't seem to get this to work on Windows XP and there is virtually no help online.

I believe I have restored my performance counters, although it's not the typical "lodctr /R" that you run on Windows servers... I expanded the files from my XP CP and restored from those, but I still have these logs:

d vice\logger_impl.cpp:371  Creating logger: console
d rvice\NSClient++.cpp:374  NSClient++ 0,4,0,169 2012-05-01 w32 Loading settings and logger...
d ngs_manager_impl.cpp:162  Boot.ini found in: C:/Program Files/NSClient++//boot.ini
d ngs_manager_impl.cpp:179  Boot order: ini://${exe-path}/nsclient.ini
d ngs_manager_impl.cpp:182  Activating: ini://${exe-path}/nsclient.ini
d ngs_manager_impl.cpp:73   Creating instance for: ini://${exe-path}/nsclient.ini
d ngs/settings_ini.hpp:268  Reading INI settings from: C:/Program Files/NSClient++//nsclient.ini
d ngs/settings_ini.hpp:234  Loading: C:/Program Files/NSClient++//nsclient.ini from ini://${exe-path}/nsclient.ini
l rvice\NSClient++.cpp:385  NSClient++ 0,4,0,169 2012-05-01 w32 booting...
d rvice\NSClient++.cpp:386  Booted settings subsystem...
d rvice\NSClient++.cpp:453  On crash: restart: NSClientpp
d rvice\NSClient++.cpp:465  Archiving crash dumps in: C:/Program Files/NSClient++//crash-dumps
d rvice\NSClient++.cpp:532  booting::loading plugins
d rvice\NSClient++.cpp:298  Found: CheckDisk
d rvice\NSClient++.cpp:298  Found: CheckEventLog
d rvice\NSClient++.cpp:298  Found: CheckExternalScripts
d rvice\NSClient++.cpp:298  Found: CheckHelpers
d rvice\NSClient++.cpp:298  Found: CheckNSCP
d rvice\NSClient++.cpp:298  Found: CheckSystem
d rvice\NSClient++.cpp:298  Found: CheckWMI
d rvice\NSClient++.cpp:298  Found: NRPEServer
d rvice\NSClient++.cpp:298  Found: NSClientServer
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/CheckDisk.dll as )
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/CheckEventLog.dll as )
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/CheckExternalScripts.dll as )
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/CheckHelpers.dll as )
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/CheckNSCP.dll as )
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/CheckSystem.dll as )
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/CheckWMI.dll as )
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/NRPEServer.dll as )
d rvice\NSClient++.cpp:830  addPlugin(C:/Program Files/NSClient++//modules/NSClientServer.dll as )
d rvice\NSClient++.cpp:807  Loading plugin: CheckDisk
d rvice\NSClient++.cpp:807  Loading plugin: Event log Checker.
d rvice\NSClient++.cpp:807  Loading plugin: Check External Scripts
d kExternalScripts.cpp:96   No wrappings found (adding default: vbs, ps1 and bat)
d rvice\NSClient++.cpp:807  Loading plugin: Helper function
d rvice\NSClient++.cpp:807  Loading plugin: Check NSCP
d rvice\NSClient++.cpp:807  Loading plugin: CheckSystem
d rvice\NSClient++.cpp:807  Loading plugin: CheckWMI
d tem\PDHCollector.cpp:91   Loading counters...
d rvice\NSClient++.cpp:807  Loading plugin: NRPE server
d tem\PDHCollector.cpp:94   Loading counter: cpu = \238(_total)\6
d erver\NRPEServer.cpp:117  Allowed hosts definition: 192.168.10.106(255.255.255.255)
d tem\PDHCollector.cpp:94   Loading counter: memory commit bytes = \4\26
d pe\server\server.cpp:40   Using cert: C:/Program Files/NSClient++//security/nrpe_dh_512.pem
d tem\PDHCollector.cpp:94   Loading counter: memory commit limit = \4\30
d pe\server\server.cpp:50   Attempting to bind to: :5666
d tem\PDHCollector.cpp:94   Loading counter: uptime = \2\674
d pe\server\server.cpp:62   Bound to: :5666
e tem\PDHCollector.cpp:110  Failed to open performance counters: \238(_total)\6: PdhAddCounter failed: -1073738823: The specified counter could not be found.
d pe\server\server.cpp:77   Thredpool containes: 10
e tem\PDHCollector.cpp:147  No performance counters were found we will not waitfor the end instead...
d rvice\NSClient++.cpp:807  Loading plugin: NSClient server
d r\NSClientServer.cpp:115  Allowed hosts definition: 192.168.10.106(255.255.255.255)
d nt\server\server.cpp:51   Attempting to bind to: :12489
d nt\server\server.cpp:63   Bound to: :12489
d nt\server\server.cpp:78   Thredpool containes: 10
d rvice\NSClient++.cpp:604  NSClient++ - 0,4,0,169 2012-05-01 Started!
l ce\simple_client.hpp:32   Enter command to inject or exit to terminate...
d nt\server\server.cpp:96   Accepting connection from: 192.168.10.106
d erver\connection.cpp:37   starting data connection
d erver\connection.cpp:61   handle_read data connection
d ver\handler_impl.cpp:38   Data: None&5&ShowAll&W3SVC
d ver\handler_impl.cpp:63   Data: ShowAll&W3SVC
d rvice\NSClient++.cpp:923  Injecting: checkservicestate...
d rvice\NSClient++.cpp:947  Result checkservicestate: CRITICAL
d nt\server\server.cpp:96   Accepting connection from: 192.168.10.106
d erver\connection.cpp:51   Timeout
d erver\connection.cpp:101  Written data
d erver\connection.cpp:37   starting data connection
d erver\connection.cpp:61   handle_read data connection
d nt\server\server.cpp:96   Accepting connection from: 192.168.10.106
d ver\handler_impl.cpp:38   Data: None&3
d erver\connection.cpp:37   starting data connection
d ver\handler_impl.cpp:63   Data:
d erver\connection.cpp:61   handle_read data connection
d nt\server\server.cpp:96   Accepting connection from: 192.168.10.106
d rvice\NSClient++.cpp:923  Injecting: checkuptime...
d ver\handler_impl.cpp:38   Data: None&1
d erver\connection.cpp:37   starting data connection
e tem\PDHCollector.cpp:249  Failed to get UPTIME value: <UN ATTACHED>: No valuehas been collected yet
d ver\handler_impl.cpp:63   Data:
d nt\server\server.cpp:96   Accepting connection from: 192.168.10.106
d erver\connection.cpp:61   handle_read data connection
d rvice\NSClient++.cpp:947  Result checkuptime: WARNING
d erver\connection.cpp:51   Timeout
d erver\connection.cpp:101  Written data
d erver\connection.cpp:37   starting data connection
d ver\handler_impl.cpp:38   Data: None&7
d erver\connection.cpp:51   Timeout
d erver\connection.cpp:101  Written data
d erver\connection.cpp:61   handle_read data connection
d nt\server\server.cpp:96   Accepting connection from: 192.168.10.106
d ver\handler_impl.cpp:63   Data:
d ver\handler_impl.cpp:38   Data: None&6&ShowAll&Explorer.exe
d erver\connection.cpp:37   starting data connection
d rvice\NSClient++.cpp:923  Injecting: checkmem...
d ver\handler_impl.cpp:63   Data: ShowAll&Explorer.exe
d erver\connection.cpp:61   handle_read data connection
d nt\server\server.cpp:96   Accepting connection from: 192.168.10.106e tem\PDHCollector.cpp:280  Failed to get MEM_CMT value: <UN ATTACHED>: No value has been collected yet
d rvice\NSClient++.cpp:923  Injecting: checkprocstate...
d ver\handler_impl.cpp:38   Data: None&2&5
d erver\connection.cpp:37   starting data connection
d rvice\NSClient++.cpp:947  Result checkmem: WARNING
d stem\CheckSystem.cpp:902  PROC>>> enumerate_processes
d ver\handler_impl.cpp:63   Data: 5
d erver\connection.cpp:61   handle_read data connection
d erver\connection.cpp:101  Written data
d erver\connection.cpp:51   Timeout
d stem\CheckSystem.cpp:902  PROC>>> enable_token_privilege
d rvice\NSClient++.cpp:923  Injecting: checkcpu...
d ver\handler_impl.cpp:38   Data: None&4&c
d stem\CheckSystem.cpp:905  PROC<<<enable_token_privilege
e tem\PDHCollector.cpp:232  Failed to get CPU value: \238(_total)\6: No value has been collected yet
d ver\handler_impl.cpp:63   Data: c
d stem\CheckSystem.cpp:902  PROC>>> FEnumProcesses
d rvice\NSClient++.cpp:947  Result checkcpu: WARNING
d rvice\NSClient++.cpp:923  Injecting: checkdrivesize...
d stem\CheckSystem.cpp:905  PROC<<<FEnumProcesses
d erver\connection.cpp:101  Written data
d erver\connection.cpp:51   Timeout
d rvice\NSClient++.cpp:947  Result checkdrivesize: OK
d stem\CheckSystem.cpp:902  PROC>>> find_crashed_pids
d erver\connection.cpp:101  Written data
d erver\connection.cpp:51   Timeout
d stem\CheckSystem.cpp:905  PROC<<<find_crashed_pids
d stem\CheckSystem.cpp:905  PROC<<<enumerate_processes
d rvice\NSClient++.cpp:947  Result checkprocstate: CRITICAL
d erver\connection.cpp:101  Written data
d erver\connection.cpp:51   Timeout

And in Nagios I see: VirtDyn1 C:\ Drive Space

OK 	05-04-2012 10:33:43 	0d 18h 23m 37s 	1/3 	c: - total: 29.99 Gb - used: 5.89 Gb (20%) - free 24.10 Gb (80%)

CPU Load

UNKNOWN 	05-04-2012 10:33:43 	0d 18h 23m 37s 	3/3 	NSClient - ERROR: Could not get data for 5 perhaps we don't collect data this far back?

Explorer

CRITICAL 	05-04-2012 10:33:43 	0d 18h 23m 37s 	3/3 	Explorer.exe: not running

Memory Usage

UNKNOWN 	05-04-2012 10:33:43 	0d 18h 23m 37s 	3/3 	NSClient - ERROR: Failed to get PDH value.

NSClient++ Version

OK 	05-04-2012 10:33:43 	0d 18h 23m 37s 	1/3 	NSClient++ 0,4,0,169 2012-05-01

Uptime

UNKNOWN 	05-04-2012 10:33:43 	0d 18h 23m 37s 	3/3 	NSClient - ERROR: Could not get value

W3SVC

CRITICAL 	05-04-2012 10:33:43 	0d 18h 23m 37s 	3/3 	W3SVC: Not found

Any direction or help would be great, Thanks.

  • Message #2561

    To add; I have gotten the process check of explorer to work by changing it to lower case.

    • Message #2562

      Although I'm sure Michael can track this down for you, egarding changing the process to lower case - see the bug I wrote up here:

      http://nsclient.org/nscp/ticket/525

  • Message #2563

    Do the counters work in perfmon?

    Michael Medin

    • Message #2564

      Yes

      • Message #2566

        Whats the name of the counters in perfmon?

        • Message #2626

          Pretty sure I've got the same problem.

          My counters are displayed as;

          Counter, Object

          Pages/sec, Memory
          %Processor Time, Processor
          Pages/sec, Memory
          System Up Time, System

          Errors below are taken from 'nsclient' file on Windows host:

          2012-06-08 17:16:09: l:..\..\..\trunk\service\NSClient++.cpp:385: NSClient++ 0,4,0,172 2012-05-08 w32 booting...
          2012-06-08 17:16:10: l:..\..\..\trunk\service\NSClient++.cpp:385: NSClient++ 0,4,0,172 2012-05-08 w32 booting...
          2012-06-08 17:16:10: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:115: Failed to open performance counters: \4\30: PdhAddCounter failed: -1073738823: The specified counter could not be found.
          2012-06-08 17:16:10: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:152: No performance counters were found we will not wait for the end instead...
          2012-06-08 17:16:48: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:285: Failed to get MEM_CMT value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:17:24: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:254: Failed to get UPTIME value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:17:25: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:254: Failed to get UPTIME value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:18:38: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:254: Failed to get UPTIME value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:18:40: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:254: Failed to get UPTIME value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:21:39: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:254: Failed to get UPTIME value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:23:16: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:254: Failed to get UPTIME value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:24:56: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:237: Failed to get CPU value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:26:48: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:285: Failed to get MEM_CMT value: <UN ATTACHED>: No value has been collected yet
          2012-06-08 17:28:29: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:254: Failed to get UPTIME value: <UN ATTACHED>: No value has been collected yet
          
          • Message #2637

            I too couldn't get it to work right with NSCP-0.4.0.172-Win32.

            I fixed it by dropping down to version NSClient++-0.3.9-Win32 and it works fine.

            • Message #2656

              This did it for me as well. Win XP 32-bit SP2 - Optiplex GX280N

            • Message #2638

              NSClient++-0.3.9-Win32 is the cure!

              Thanks for the tip Synikil.

              Everything now working great :D

              • Message #2657

                Could someone with this issue try setting the counters manually? Just to see if it related to index lookups?

                [/settings/check/system/windows]
                default=false
                [/settings/check/system/windows/pdh/counters]
                memory commit limit=\\4\\30
                cpu=\\238(_total)\\6
                memory commit bytes=\\4\\26
                uptime=\\2\\674
                

                Replace the indexes with the proper names for your counters?

                0.4.0 dropped the "support" for the old file which I thought was not really useful, perhaps this was wrong?

                Michael Medin

                • Message #2665

                  Just wanna clearify there were to many
                  :Es there. THis is the correct config...

                  [/settings/check/system/windows]
                  default=false
                  [/settings/check/system/windows/pdh/counters]
                  memory commit limit=\4\30
                  cpu=\238(_total)\6
                  memory commit bytes=\4\26
                  uptime=\2\674
                  
                  • Message #2694

                    I tried to set:

                    [/settings/check/system/windows]
                    default=false
                    [/settings/check/system/windows/pdh/counters]
                    memory commit limit=\4\30
                    cpu=\238(_total)\6
                    memory commit bytes=\4\26
                    uptime=\2\674
                    

                    then restart. But I get the following on log:

                    2012-07-16 20:06:30: l:..\..\..\trunk\service\NSClient++.cpp:385: NSClient++ 0,4,0,172 2012-05-08 w32 booting... 2012-07-16 20:06:30: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:115: Failed to open performance counters: \238(_total)\6: PdhAddCounter? failed: -1073738823: The specified counter could not be found.

                    2012-07-16 20:06:30: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:152: No performance counters were found we will not wait for the end instead...

                    and the command: check_nrpe -H _HOST_NAME_ -u -t 30 -c CheckCPU -a warn=100 crit=100 time=1

                    returns:

                    ERROR: Could not get data for 1 perhaps we don't collect data this far back?

                    and I see the following on log:

                    2012-07-16 20:08:18: e:..\..\..\..\trunk\modules\CheckSystem\PDHCollector.cpp:237: Failed to get CPU value: \238(_total)\6: No value has been collected yet

                    I will downgrade to 0.39 and recheck, but I will preffer the current version since I use some of the new features.

                    • Message #2695

                      Hi,

                      Admittedly, I'm very new to all of this, so please bear with me if I mess up.

                      I've had (and I still have) similar symptoms in the log file. I don't know how I got the idea, but here's what "works" now in the sense that I get the data I want into nagios:

                      checkcpu warn=75 crit=90 time=15s time=60s time=300s
                      

                      I've added units (seconds) to the time attribute.

                      The weird message about the performance counters is still there, but now I do get reasonable reporting on the metrics I've realized so far. In other words, the logfile messages seem to indicate a different problem.

                      Can anybody confirm that?


                      Edit: Leave out the percentages, but do put the units on "time". I've corrected the text above accordingly.

                  • Message #2666

                    Just to clearify my clearification :)

                    The config you want is the one that has proper names for the queries and not numbers :)

                    Michael Medin

            • Message #2789

              Thanks, this also helped me. I spent the day trying to restore performance counters that were fine all along...

              It was a windows XP pro.

              Serves me right for using unstable versions. Perhaps the stable one (0.3.9) should be at the top of the download page?

Subscriptions