Jump to content


  • Content Count

  • Joined

  • Last visited

  • Days Won


Slartibartfast last won the day on November 21 2019

Slartibartfast had the most liked content!

Community Reputation

5 Neutral

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. We've all come to the forums at some point looking for a way to get more specific results from a monitor than is available with the default tools and options in CWA, and have stumbled across posts detailing the complex and arcane process of making RAWSQL monitors. These are basically where you take all the builtin logic that monitors do behind the scenes and recreate it manually with a query. The advantages of this are that you can get much more specific with your queries to a degree simply not possible in a regular monitor. There are downsides to RAWSQL monitors though. They require a l
  2. You can do that, but these are just simple SQL queries so if they are failing your server likely has a serious problem that will very quickly become apparent. I've been running these for a year+ and never had any of them fail.
  3. I know they reported that the issue with the windowsupdateetlfiles table was fixed but I think people still encountered the issue. You can certainly try turning off this step and seeing if the table remains reasonably sized.
  4. I often find myself giving out several SQL Execute steps I run in a daily script and explaining what they do, so this is mainly to save me time and typing. I am simply going to list the SQL Statements and an explanation of what each one does. These all go into a script that I schedule against the CWA server 1 time a day, but you can schedule it however often you like. 1. UPDATE agents SET lastscan = now() WHERE lastscan > now() This resets all disabled internal monitors 2. UPDATE hotfix SET pushed='0' WHERE installed=0 AND pushed=1 AND approved=2 T
  5. On the IRC channel so far viewtopic.php?f=5&t=1009 <- in case anyone is bored, or has ran into this before Sorry Katty, not something _I've_ seen. [12:30] No clue [12:30] okie dokie [12:30] Is there anything on the DC that Robin SHOULD be accessing? [12:31] Does robin even exist? [12:31] only thing i can think of is maybe they have something installed that's looking for shares but doesn't have all the cred info. [12:32] i'd lean towards a peristent mapped drive with stored expired creds [12:32] yea
  • Create New...