Promo Download

Hi,

The Kiwi Web Access (KWA) encrypts the password before sending it to the server. That is the reason, why you see the password length gets increased.

Our engineering team advises to reinstall the KWA with new user name and password. (You can get the KWA setup from KSS application folder\Setup.) Then use that user name and password.

Please let me know whether it helped.

Regards,

Jiri

Jiri,

Re-installing with a new ID resolved the problem.

Thank you,

Rubin

I'm really glad to hear that.

If you need anything else, feel free to ask.

Jiri

Jiri,

Now that I have tested your program successfully, I would like to turn it off for now so that it frees up my port so that my server can still log for the interim on my current logging system. How do I go about doing this?

Thank you,

Rubin

Rubin,

Kiwi Syslog can be installed in two modes -- as an application or as Windows service.

If you installed it as application, then simply close it.

If you installed it as Windows service, then stop / disable the service (called Kiwi Syslog Server).

Regards,

Jiri

Jiri,

Sorry to bother you again, but I am on a short deadline to find a syslog system. Looking at your specs, I have found really good benefits to your product. However, I have one question in particular. For your setting that asks for a min. count of messages, it asks for a minimum threshold that wasn’t reached each hour. Is there a way to change that minimum to a per day/per week threshold?

Thank you,

Rubin

Jiri,

Sorry to bother you again, but I am on a short deadline to find a syslog system. Looking at your specs, I have found really good benefits to your product. However, I have one question in particular. For your setting that asks for a min. count of messages, it asks for a minimum threshold that wasn’t reached each hour. Is there a way to change that minimum to a per day/per week threshold?

Thank you,

Rubin

Rubin,

I'm ready to help you but I'm not sure what threshold you are talking about. Could you e.g. attach a screenshot?

Thanks,

Jiri

Jiri,

The picture refers to the issue that I was referring to in yesterday’s email. The minimum threshold is set per/hr. and doesn’t, at least at first glance, have an option to be changed. Additionally, after further investigation, I saw that the logs are placed in a notepad, which is great. What concerns me about this is that all the logs, from multiple servers and devices, are all lumped into this one notepad file. Is there a way that they can be separated so that each device’s log can be placed in its own notepad file and on this more individual basis the email notification will run. My goal with all of this is to be alerted when an individual device of mine has not reached a minimum log that I have set.

Some possible solutions that I was thinking about on my end was to script over it so that we can parse the notepad into separate files ourselves. Or we would place in a SQL database, if this is at all possible (another curiosity of mine).

Thank you,

Rubin

Rubin,

That threshold is only hourly, but one of the nice things about KSS is that it has a built in script engine. So you can use that, or even just use rules and filters if you don't have too many DevIces. I can help you with a script to set a per/device threshold if that's what you need. But I already have a script to alert you of a device that hasn't sent a message within your specified time-frame.

As to your second question, it's possible to script your logs into different files or even into SQL. But another great thing about KSS is that you don't have to. You can configure it to send different devices into different files, archive logs, and even log to an external SQL database or other ODBC database without having to parse the log or write any scripts.

Acy

Are you referring to your post that I have just placed the location of below?

http://thwack.solarwinds.com/docs/DOC-170644

If so, I was wondering whther for my situation, to see whether my device has STOPPED logging for a certain amount of time (a period of time which I would like to be able to decide on my own), this works.  It sounds like I would go with your first option (Scheduling), but I wasn't clear on what exactly that meant.

Thank you

That's the one. Any of the monitoring options will work for you, but the one you use should depend on how short you want the threshold to be.

The first script is used in a rule that allows all messages from all devices you want to monitor. It logs a time stamp, threshold, and nag timeout for each device every time it receives a message from each device.

The second script handles the alerts. It checks the last check-in time for each device compares that the current time. If you use the all-in-one option, it will also check to see if it has already alerted you within a set timeframe for the device and will wait if it has.

If you want your threshold to be measured in hours or days, then use a schedule for the second script. If you want your threshold to be measured in minutes (like 60 or less) and you are not already using keep-alives for something else, then that is probably the best option.

The last option is what I use because I measure some of my devices with 30 second thresholds. The all-in-one option requires you to  uncomment the bottom of the script and throw away the second script, you won't need it. This option checks the thresholds for every device every time it receives a message from ANY device. Obviously you cant monitor a 30 second checkin if you only get a message every 2 minutes.

Let me know if you need any help getting it setup, there are comments in the script too.

Ah I see what you’re saying, but wouldn’t placing it into a scheduler be a bit more difficult than just changing the ChkIn value within the second script to be a much larger amount of seconds, or say just even changing the value from seconds to minute/hours/etc.?

Additionally, I have tweaked your excellent code just a bit, in order to try and better illustrate my code, as attached.

Thank you

I have successfully installed your script, and have gotten updates to tell me whether I have reached the minimum threshold that I set through your second option. However, for some reason I am getting multiple emails every minute once the minimum threshold was missed for the first time. Is there a way to make a break and stop this after the first email that notified me about missing the minimum threshold to receive a log message? As of now I created a rule with an action that runs the script, in addition to a scheduler to ruin that script also. Should I have only set one of the two?

Thank you

Rubin,

I apologize for the lack of a response, I was out of town on vacation last week.

I've looked at the script you posted and you're missing the nag interval setting. Do a compare from your script to mine and you'll see that I am logging 2 date/time stamps in the initial message and both are being checked in the alerting step. The first is checking whether or not the device has failed to check in within the threshold and the second is to determine whether or not you have already been alerted for that specific device within the last "Interval" seconds.

Also, while the all-in-one script is a more simple solution, the reason I have the other available options is because if you have a lot of devices to check and a lot of message traffic, you might not want that second part of your script to fire off 500 times/second when your threshold is set to 24 hours. If you schedule the second script to run every 24 hours, you'll get the same result without the need to go through and check every device you're monitoring every time you receive a message. Same concept with using a rule to check for keep-alives, you can set it to check the devices every 30 minutes or so instead of every time you receive a message.

I personally have devices that send messages every few seconds so the all-in-one option makes sense for me and isn't wasting any processing power that isn't needed. My lowest threshold is 30 seconds and my largest is 12 hours.

Either way, the amount of processing power is negligible and not worth fussing with unless you start experiencing performance problems, then just keep in mind, this is something you can tweak to get a few cpu cycles back.

I hope I answered all of your questions.

Acy