Trapping NSEs on a client

Article:HOWTO4191  |  Created: 2005-09-21  |  Updated: 2014-01-07  |  Article URL http://www.symantec.com/docs/HOWTO4191
Article Type
How To

Product(s)


Question

For troubleshooting purposes, it can be useful to trap a copy of each outgoing NSE file the Altiris Agent is sending to the Notification Server.

Answer

A good resource when troubleshooting client-side issues involving NSEs is the option to capture NSEs as they are sent to the server.

Capture NSEs on the Agent by adding (if not present) or modifying the following string value:

  1. HKLM | Software | Altiris | Altiris Agent | Transport | Capture Events Folder (on a Windows 7 64 Bit machine it is HKLM | WOW6432Node |Altiris |Altiris Agent | Tranport | Capture Events Folder)
  2. Modify the String value “Capture Events Folder” so that the Value data points to a directory or path to store a copy of all outgoing NSEs.

Analyze what NSEs are being sent from this client machine. To test if the NS is processing them, place the NSE's captured on the NS\Drive:\Program Files\Altiris\Notification Server\NSCap\EvtQFast.

 

Be sure to remove the value from this registry entry after testing as it will eventually consume significant disk space.

 

 

Note: If trapping NSE's for Patch Management Inventory; Enable the NSE Capture, and then run the AeXPatchUtil.exe /i cmd as outlined in this article: http://www.symantec.com/business/support/index?page=content&id=HOWTO4198. Please allow for 30 minutes to 1 hour for the process to complete concerning the Patch Management Inventories.



Legacy ID



2454


Article URL http://www.symantec.com/docs/HOWTO4191


Terms of use for this information are found in Legal Notices