Werk #1671: windows agent: fixed gaps in eventlog monitoring after agent restart

Komponente Checks & agents
Titel windows agent: fixed gaps in eventlog monitoring after agent restart
Datum 20.01.2015
Checkmk Edition Checkmk Raw (CRE)
Checkmk-Version 1.2.7i1
Level Bedeutende Änderung
Klasse Bugfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

The windows eventlog monitoring was not entirely continuous. After the agent started it determined determined the initial record number for each eventlog. Per default the start number was the last record. Thus resulted in monitoring gaps as long as the windows was not running, e.g. windows startup.

With this fix, the windows agent now uses a statefile (eventstate.txt) which contains the last processed eventrecord ids for each eventlog. On startup the statefile is read and the record numbers are set accordingly.

Zur Liste aller Werks