Search the Community
Showing results for tags 'template'.
Found 2 results
I am struggling with the new GEN2 probe and it's identification of VMware virtual machines. The probe locates the VM, but it classifies it as: Manufacturer = "Vmware, INC." Type - "Network Device" It appears to stop there and is never identified as a windows machine so the probe never pushes out the agent to the endpoint. The Agent Readiness shows either Not Applicable (can't recognize if it is a computer) or Not Ready (no valid credentials found) even though every possible location where client credentials are needed is populated with the correct credentials (I verified this because non-VM's get the agent installed just fine from the same probe.) The legacy deployment manager can push the agent to the endpoint, and the new CWA agent deploy utility can also push the agent out to these endpoints without issue. I just want to figure out why the probe isn't detecting it as a windows endpoint and pushing the agent out automatically. I need some help on this one as Automate support never figured it out and it is slowing down our deployment having to open each device and install the client manually or use one of the tool or utilities to manually push the agent out. Note: I am aware of GPO based deployment but I can't wait forever to get an endpoint to reboot to install the agent. Most of these are servers and getting clients to allow server reboots (even when everyone is asleep is next to impossible.)
I am trying to make tickets more readable coming from the stock Blacklisted Event Internal monitors, but tickets are not being created for my custom monitors, in CW Automate or CW Manage: EV - BlackListed Events Informational Errors Only EV - BlackListed Events Warnings and Errors Only To do this I have created custom Monitors, Alert Templates, Alert Actions, and Autofix Scripts by copying the stock ones used by the stock monitors above. Here is the setup for my custom Informational monitor for example: Stock Monitor : EV - BlackListed Events Informational Errors Only Custom : Event Log Errors - Informational - CUSTOM Stock Alert Template : ~Autofix Action Blacklist Events - Informational Custom : ~Autofix Action Blacklist Events - Informational CUSTOM Stock Autofix Script : Monitor Disk Blacklist Events - Informational* Custom : Monitor Disk Blacklist Events - Informational* CUSTOM The problem is, when I manually Run and Reset the custom monitors, neither of them create any tickets. The correct results DO show up under the "Status" and "Build and View Query" tabs of the custom monitor. I have narrowed it down to a problem with the custom Autofix script, because it DOES work when I change the Alert Template to use the stock Autofix script. I cannot figure out why my custom Autofix script isn't working. Here are screenshots of my configurations for the custom Monitor and AutoFix script, compared to stock: Monitor: Script: