What Orion Service Uses SWJobEngineWorker2.exe

Question

Dear Thwacksters;

I have a quick question.  What Orion product or poller uses C:\program Files (x86\Common Files\SolarWinds\JobEngine.v2\SWJobEngineWorker2.exe.

I got this info from the LEM.

This account is locking a service account in AD.

I have looked with One of our Web/DB team and they cannot fine it on the webUI at all under the windows credentials.  My personal feeling it is something that somehow did not get removed fully.

Thank You

Steve

jrouviere · Answer

It sounds like you basically found it, the Agent uses a lot of the same services and plugins, but would only be listed as the SolarWinds Agent service, not the separated services that you would see on a polling engine.

Additionally it sounds like you likely have an application template that could be updated, review the node or related nodes for any SAM application templates and you can update the credentials from there, you shouldn't have to change anything for the service directly.

If you'd rather just remove it you can either delete the template or uninstall the agent, but you'll want to check the node in Orion to make sure that it's polling another way and your expected monitoring is intact.

nckelwd · Answer

What if this service doesn't exist on my server?

Under the Task Manager > Details tab, I have the SWJobEngineWorker2.exe firing off every 5 minutes, but there are not any Services or Scheduled Tasks associated with the process, the only Service installed/running is 'SolarWinds Agent'.

How can I remove this process or alter the user account it uses?

My issue is that is is attempting to connect to SQL using SQL Authentication (which the account used does not exist as a SQL account), but it is an Active Directory account, so there is nothing to lock out.

If I remove this, will we have issues with other SW polling?

neomatrix1217 · Answer

This is a service running on the Orion server check to see if someone used their local account for this service.