About application metering start, stop, and denial events

Article:HOWTO63533  |  Created: 2011-12-16  |  Updated: 2012-04-20  |  Article URL http://www.symantec.com/docs/HOWTO63533
Article Type
How To


Subject


About application metering start, stop, and denial events

(Windows only)

Inventory Solution provides the application metering policy option Record usage events. This option lets you track the usage events of the applications that are defined in the policy.

When the Record usage events option is enabled, and a user of a managed computer starts or stops a monitored application, an event is generated. When a user tries to use an application whose monitoring policy denies its use, a denial event is generated. Every start event has a stop event or becomes a denial event. After the events are sent to the Configuration Management Database (CMDB), you can generate reports to view this data.

See About metering and denying applications

See About application summary data.

The Application Metering Plug-in sends the events to the CMDB in a batch at a specified interval.

The event data is very small, such as a few thousand bytes. If the Symantec Management Agent cannot connect to the CMDB, the managed computer saves the information locally and sends it later.

If a managed computer terminates abnormally, then the next time it starts, the Application Metering Plug-in does the following functions:

  • Determines which applications were running when the computer was terminated

  • Generates the appropriate stop events

Application metering records a variety of application events.

When you view a managed computer in the Resource Manager, you can view application metering start and stop events data by clicking View > Events, and then expanding Data Classes > Inventory > Application metering.

Table: Application metering start events data

Field

Description

Example

FileResourceGUID

Resource guid that is generated by using various attributes of a file. For example, its internal name, manufacturer, version etc.

{018B191B-47AE-4180-9FCD- 7F3CEA4F1E12}

UserGuid

Resource guid that is generated for a specific user on a domain.

{493435F7-3B17-4C4C-B07F- C23E7AB7781F}

PID

Process ID of the application.

804

Policy Name

Name of the application metering policy.

Microsoft Word

Start Date

Date and time of the event.

9/03/2004 9:51:18 A.M.

Policy GUID

The GUID of the policy that caused the event to be generated.

{CC1355B1-3993-4519-BB4C-8C41735E3825}

command-line

The command-line options that are used to start the application.

/n

Denied

Specifies whether this event is a denial event.

0 = not a denial event

1 = denial event

0

File Path

Path to the application file on the managed computer.

C:\Program Files\Microsoft Office\Office\WINWORD.EXE

Table: Application metering stop events data

Field

Description

Example

PID

Process ID of the application.

804

Policy Name

Name of the application metering policy.

Microsoft Word

Start Date

Date and time of the event.

9/03/2004 9:51:18 A.M.

Total Run Time

Time Total amount of time in seconds that the application was used during the monitoring period .

When the application is monitored, this value is updated every 30 seconds.

188714

Peak Memory

Maximum amount of memory in bytes used by the application during the monitoring period. When the application is monitored, this value is updated every 30 seconds.

7921664

Average CPU

Average CPU usage by the application during the monitoring period, where 100 equals 100 percent usage. When the application is monitored, this value is updated every 30 seconds. This information is not available from the managed computers that are running Windows 9x/Me.

0.7652


Legacy ID



v15110947_v66534462


Article URL http://www.symantec.com/docs/HOWTO63533


Terms of use for this information are found in Legal Notices