Jump to content

Search the Community

Showing results for tags 'blacklist'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • MSPGeek
    • Announcements
    • The Geek Cast
  • ConnectWise Automate / Labtech
    • ConnectWise Automate / LabTech
    • ConnectWise Automate / LabTech - Development

Categories

  • ConnectWise Automate
    • Scripts
    • Plugins
    • SQL Snippets
    • Role Definitions
    • Automate PowerShell Code
    • Reports
    • Internal Monitors
    • Remote Monitors
  • ConnectWise Manage
    • API Interacting Code

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


About Me


Location


Agent Count


INTERESTS


OCCUPATION


ICQ


WEBSITE


WLM


YAHOO


AOL


FACEBOOK


GOOGLEPLUS


SKYPE


TWITTER


YOUTUBE

Found 2 results

  1. The "SW - BlackListed Install" and "SW - Unclassified Apps" monitors do not support wildcard matching, so whitelisted or blacklisted application entries with wildcards are not used in these monitor results. This causes false positives, extra ticket noise, etc. These monitors can be adjusted to support wildcards. For the "SW - Unclassified Apps" monitor, the default "Result" field value is: (Select Name from Applicationblacklist union select name from applicationwhitelist) To enable Wildcard matching, replace the Result value with the following: (SELECT DISTINCT `Name` FROM (SELECT Software.Name FROM Software JOIN (SELECT REPLACE(`Name`,'*','%') AS `Name` FROM ApplicationBlacklist WHERE INSTR(REPLACE(`Name`,'*','%'),'%')>0 UNION SELECT REPLACE(`Name`,'*','%') FROM ApplicationWhitelist WHERE INSTR(REPLACE(`Name`,'*','%'),'%')>0) AS AppMatches ON Software.`Name` LIKE AppMatches.`Name` UNION SELECT Software.Name FROM Software JOIN (SELECT `Name` FROM ApplicationBlacklist WHERE INSTR(`Name`,'%')=0 UNION SELECT `Name` FROM ApplicationWhitelist WHERE INSTR(`Name`,'%')=0) AS AppList ON Software.Name = AppList.Name) AS Applications) For the "SW - BlackListed Install" monitor, the default "Result" field value is: (Select Name from Applicationblacklist) To enable Wildcard matching, replace the Result value with the following: (SELECT DISTINCT `Name` FROM (SELECT Software.Name FROM Software JOIN (SELECT REPLACE(`Name`,'*','%') AS `Name` FROM ApplicationBlacklist WHERE INSTR(REPLACE(`Name`,'*','%'),'%')>0) AS AppMatches ON Software.`Name` LIKE AppMatches.`Name` UNION SELECT Software.Name FROM Software JOIN (SELECT `Name` FROM ApplicationBlacklist WHERE INSTR(`Name`,'%')=0) AS AppList ON Software.Name = AppList.Name) AS Applications) I hope this helps! It has been reported that some browsers are not copying the text correctly. Chrome is believed to work, Firefox may be suspect. If you have any errors try copying the text using a different browser.
  2. I am trying to make tickets more readable coming from the stock Blacklisted Event Internal monitors, but tickets are not being created for my custom monitors, in CW Automate or CW Manage: EV - BlackListed Events Informational Errors Only EV - BlackListed Events Warnings and Errors Only To do this I have created custom Monitors, Alert Templates, Alert Actions, and Autofix Scripts by copying the stock ones used by the stock monitors above. Here is the setup for my custom Informational monitor for example: Stock Monitor : EV - BlackListed Events Informational Errors Only Custom : Event Log Errors - Informational - CUSTOM Stock Alert Template : ~Autofix Action Blacklist Events - Informational Custom : ~Autofix Action Blacklist Events - Informational CUSTOM Stock Autofix Script : Monitor Disk Blacklist Events - Informational* Custom : Monitor Disk Blacklist Events - Informational* CUSTOM The problem is, when I manually Run and Reset the custom monitors, neither of them create any tickets. The correct results DO show up under the "Status" and "Build and View Query" tabs of the custom monitor. I have narrowed it down to a problem with the custom Autofix script, because it DOES work when I change the Alert Template to use the stock Autofix script. I cannot figure out why my custom Autofix script isn't working. Here are screenshots of my configurations for the custom Monitor and AutoFix script, compared to stock: Monitor: Script:
×
×
  • Create New...