Anyone else seen this? Or know how/why it could be happening?
Hi Dave,
You can select Manage Templates in the APM Settings. Then look through the list of Application Monitor Templates, find the Run 3rd party application template, and check to see if it is listed as being assigned to nodes. If it shows "No assigned nodes", then it has not been assigned.
Hope this helps,
Mike
Hello Dave,do you have some custom scripts in APM? I can't think of other reason why notepad processes are spawned than some custom script in Windows Script Monitor that spawns them without closing.
None that would open notepad on the SolarWinds server.
Is there any script that opens notepad on some other machine? Windows Script Monitor executes scripts on APM server, not on target machine.
If you are sure that you don't open it intentionally, you can try to setup auditing on notepad.exe to see what process opens it. You can find how to do it here: http://support.microsoft.com/kb/310399/en-us
Once you setup auditing for nodepad.exe, you should see what process was used to open it in Windows Security event log.
The Orion APM template "Run 3rd Party Application" contains a Windows Script monitor that runs notepad.exe as an example executable file.
Do you have that template assigned to any nodes?
Don't think so...how do I tell for certain?
