Security Logs Not Sended to SSIM

Updated: 02 Mar 2012 | 38 comments

HEMANPR

+1 1 Vote

This issue has been solved. See solution.

Hello

I try to capture the Windows Security Logs from sy servers with SSIM

Windows 2003 with agent and universal collector installed and Windows 2008 with agent and vista collector installed.

I receive just Application and Diagnostic Logs but never I receive from Security.

I configure the Winrm in Windows 2008 but nothing change...

Please Help Thanks

Discussion Filed Under:

Security, Symantec Information Manager, Agents, Best Practice, Configuring, Documentation, Features, Monitoring, Tip/How to, Troubleshooting

Comments RSS Feed

Comments

Feb

2012

0 Votes 0

Avkash K

Can you please post any error

Can you please post any error if you are getting from collector log files.

Regards,

Avkash K

Feb

2012

0 Votes 0

HEMANPR

Where I can get the error log

Where I can get the error log files from the Host Server?

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

2 Votes +2

Avkash K

Check for Agent installation

Check for Agent installation path.

Generally for 2003 32 bit ...C:\Program Files\Symantec\Event Agent\logs\

file name windowseventlog.log

For 2008 32 bit....C:\Program Files\Symantec\Event Agent\logs\

File name : msvista.log

Check for latest ERR line.

Regards,

Avkash K

Feb

2012

0 Votes 0

HEMANPR

INFO 2012-02-03 11:42:48,733 Collectors.3381 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-03 11:42:48,967 Collectors.3381.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-03 11:42:49,014 Collectors.3381.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.windows.WindowsEventlogSensor" initiated (enable: true).
INFO 2012-02-03 11:42:49,014 Collectors.3381.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-03 11:42:49,014 Collectors.3381 com.symantec.management.util.TimerThread Configuration: Default
INFO 2012-02-03 11:42:49,014 Collectors.3381 com.symantec.management.util.TimerThread Product ID: 3381
INFO 2012-02-03 11:42:49,014 Collectors.3381 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-03 11:42:49,014 Collectors.3381 com.symantec.management.util.TimerThread Software feature ID: 33810101
INFO 2012-02-03 11:42:49,014 Collectors.3381 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-03 11:42:49,030 Collectors.3381 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-03 11:42:49,092 Collectors.3381 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-03 11:42:49,092 Collectors.3381 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-03 11:42:49,092 Collectors.3381 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33810101, group name: "workinggroup0")
INFO 2012-02-03 11:42:49,092 Collectors.3381 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-03 11:42:49,092 Collectors.3381.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.windows.WindowsEventlogSensor"...
INFO 2012-02-03 11:42:49,092 Collectors.3381.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-03 11:42:49,092 Collectors.3381.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-03 11:42:49,092 Collectors.3381.wGroup.[workinggroup0] workinggroup0 Working group is off.

Windows 2008 Servers - uvista.log

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

Avkash K

Hi HemanPR, I think you

Hi HemanPR,

I think you have not configured the sensor settings for your collectors.

Please have a look at the following for your refrence.

For 2003 Collector:

Go To system TAB & check for below settings.

Create new configuration under windows event collector product:

Do not forget to enable that sensor & then add the perticluar computer to the configuration you just created check this.

Right click the config you just created go to properties find the computer & add.

For 2008 Collector:

Go to System TAB, go to vista product collector, Add new config, configure the sensor as shown below,

After creating this sensor repeat the procedure to add the target computer in properties of the sensor config.

Hope this helps you!!

Regards,

Avkash K

Feb

2012

1 Vote +1

Shahnawaz

It seems that you have

It seems that you have integrated the server but failed to configure the same at SSIM.

Please go through the below steps:

Go to

System Tab ->

Production Configuration Tab - > find

Microsoft Windows Vista Event Collector for WIN 2k8 server

AND

Microsoft Windows Event Collector for WIN 2k3 server - >

Right Click on the Sensor Configuration - >

Properties - >

Computer Tab ->

Add -> to add a compter of the host name you hav integtared - >

Once you find the compter - >

Check the server ip under identification tab for the server ip you have integrated.

Right Click on Sensor Configuration - > Distribute.

Once the above steps performed. Check the log file on the server and then verify that you received the logs or not.

Hope it works for you.

Feb

2012

0 Votes 0

HEMANPR

Ok Now I get logs only for

Ok Now I get logs only for Diagnostic

I do this:

Go to

System Tab ->

Production Configuration Tab - > find

Microsoft Windows Vista Event Collector for WIN 2k8 server

AND

Microsoft Windows Event Collector for WIN 2k3 server - >

Right Click on the Sensor Configuration - >

Properties - >

Computer Tab ->

Add -> to add a compter of the host name you hav integtared - >

Once you find the compter - >

Check the server ip under identification tab for the server ip you have integrated.

Right Click on Sensor Configuration - > Distribute.

*****************************************************************************************************************

I change the sensor for just receive Security Logs. I just receive a few Diagnostic Logs.

If I change the sensor for capture Applications Logs, I receive the Application Logs and Diagnostic Logs.

This is happening in Windows 2003 and Windows 2008 Servers

I have installed the Agent (Symantec Event Agent 4.7.1 Installer for Windows® ) on each server and the Collector on Windows 2003 ( Universal Collector for Windows® ) and Windows 2008 ( Universal Collector for Windows Vista® ).

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

Shahnawaz

Can you paste the diagnostic

Can you paste the diagnostic logs to look futher on this case.

Feb

2012

0 Votes 0

HEMANPR

Here the uvista log for a

Here the uvista log for a Windows 2008n Server

INFO 2012-02-03 11:48:40,216 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-03 11:48:40,497 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-03 11:48:40,544 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-03 11:48:40,544 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-03 11:48:40,544 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Default
INFO 2012-02-03 11:48:40,544 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-03 11:48:40,544 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-03 11:48:40,544 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-03 11:48:40,544 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-03 11:48:40,560 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-03 11:48:40,607 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-03 11:48:40,607 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-03 11:48:40,607 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-03 11:48:40,607 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-03 11:48:40,607 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-03 11:48:40,622 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-03 11:48:40,622 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-03 11:48:40,622 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 08:33:35,553 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 08:33:35,553 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 08:33:35,553 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 08:33:35,553 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 08:33:35,569 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 08:33:35,631 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 08:33:35,647 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 08:33:35,647 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 08:33:35,647 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 08:33:35,647 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 08:33:35,647 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 08:33:35,647 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 08:33:35,647 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 08:33:35,647 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 08:33:35,647 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 08:33:35,662 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 08:33:35,662 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 08:33:35,662 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 08:33:35,662 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 08:33:35,662 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 08:33:35,662 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 08:33:35,662 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 08:38:52,225 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 08:38:52,225 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 08:38:52,240 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 08:38:52,240 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 08:38:52,256 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 08:38:52,303 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 08:38:52,319 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 08:38:52,319 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 08:38:52,319 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 08:38:52,319 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 08:38:52,319 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 08:38:52,319 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 08:38:52,319 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 08:40:47,975 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 08:40:47,975 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 08:40:47,975 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 08:40:47,975 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 08:40:47,990 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 08:40:48,037 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 08:40:48,037 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 08:40:48,037 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 08:40:48,037 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 08:40:48,037 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 08:40:48,053 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 08:40:48,053 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 08:40:48,053 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 08:40:48,053 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 08:40:48,053 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 08:40:48,053 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 08:40:48,053 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 08:40:48,053 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 08:40:48,053 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 08:40:48,053 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 08:40:48,053 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 08:40:48,053 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 08:50:08,615 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 08:50:08,631 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 08:50:08,631 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 08:50:08,631 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 08:50:08,647 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 08:50:08,694 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 08:50:08,709 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 08:50:08,709 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 08:50:08,709 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 08:50:08,725 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 08:50:08,725 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 08:50:08,725 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 08:50:08,725 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 08:50:08,725 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 08:51:21,615 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 08:51:21,615 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 08:51:21,615 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 08:51:21,615 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 08:51:21,631 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 08:51:21,662 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 08:51:21,678 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 08:51:21,678 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 08:51:21,678 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 08:51:21,678 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 08:51:21,678 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 08:51:21,678 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 08:51:21,678 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 08:51:41,131 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 08:51:41,131 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 08:51:41,131 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 08:51:41,131 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 08:51:41,131 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 08:51:41,303 Collectors.3384.wGroup.[workinggroup0].Sensor.[SeverName] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-07 08:51:41,319 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 08:51:41,334 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 08:51:41,334 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 08:51:41,334 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 08:51:41,334 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 08:51:41,334 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-07 08:51:41,334 Collectors.3384.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-07 08:51:42,725 Collectors.3384.wGroup.[workinggroup0].Sensor.[SeverName] Thread-86007 Subscription error. Details: java.net.ConnectException: Connection refused: connect
ERROR 2012-02-07 08:51:42,725 Collectors.3384.wGroup.[workinggroup0].SensorThread Thread-86007 [Sensor: SeverName] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-07 08:53:33,334 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 08:53:33,350 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 08:53:33,350 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 08:53:33,350 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 08:53:33,350 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 08:53:33,365 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 08:53:33,381 Collectors.3384.wGroup.[workinggroup0].Sensor.[SeverName] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-07 08:53:33,397 Collectors.3384.wGroup.[workinggroup0].Sensor.[GDB03DC] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-07 08:53:33,397 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 08:53:33,412 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 08:53:33,412 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 08:53:33,412 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 08:53:33,412 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 08:53:33,412 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-07 08:53:33,444 Collectors.3384.wGroup.[workinggroup0] workinggroup0 All sensor threads (2) have been created.
ERROR 2012-02-07 08:53:33,553 Collectors.3384.wGroup.[workinggroup0].Sensor.[GDB03DC] Thread-86040 Subscription error. Details: java.io.IOException: Service Unavailable
ERROR 2012-02-07 08:53:33,569 Collectors.3384.wGroup.[workinggroup0].SensorThread Thread-86040 [Sensor: GDB03DC] Sensor thread failed to open device. Trying to reopen...
ERROR 2012-02-07 08:53:34,475 Collectors.3384.wGroup.[workinggroup0].Sensor.[SeverName] Thread-86039 Subscription error. Details: java.net.ConnectException: Connection refused: connect
ERROR 2012-02-07 08:53:34,475 Collectors.3384.wGroup.[workinggroup0].SensorThread Thread-86039 [Sensor: SeverName] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-07 08:54:07,740 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 08:54:07,803 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 08:54:07,803 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 08:54:07,803 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 08:54:07,803 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 08:54:07,819 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 08:54:07,834 Collectors.3384.wGroup.[workinggroup0].Sensor.[SeverName] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-07 08:54:07,850 Collectors.3384.wGroup.[workinggroup0].Sensor.[GDB03DC] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-07 08:54:07,865 Collectors.3384.wGroup.[workinggroup0].Sensor.[GDB01SQL] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-07 08:54:07,881 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 08:54:07,897 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 08:54:07,897 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 08:54:07,897 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 08:54:07,897 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 08:54:07,897 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-07 08:54:07,897 Collectors.3384.wGroup.[workinggroup0] workinggroup0 All sensor threads (3) have been created.
ERROR 2012-02-07 08:54:07,912 Collectors.3384.wGroup.[workinggroup0].Sensor.[GDB03DC] Thread-86053 Subscription error. Details: java.io.IOException: Service Unavailable
ERROR 2012-02-07 08:54:07,928 Collectors.3384.wGroup.[workinggroup0].SensorThread Thread-86053 [Sensor: GDB03DC] Sensor thread failed to open device. Trying to reopen...
ERROR 2012-02-07 08:54:08,928 Collectors.3384.wGroup.[workinggroup0].Sensor.[SeverName] Thread-86052 Subscription error. Details: java.net.ConnectException: Connection refused: connect
ERROR 2012-02-07 08:54:08,928 Collectors.3384.wGroup.[workinggroup0].SensorThread Thread-86052 [Sensor: SeverName] Sensor thread failed to open device. Trying to reopen...
ERROR 2012-02-07 08:54:09,584 Collectors.3384.wGroup.[workinggroup0].Sensor.[GDB01SQL] Thread-86054 Subscription error. Details: java.io.IOException: Not Found
ERROR 2012-02-07 08:54:09,584 Collectors.3384.wGroup.[workinggroup0].SensorThread Thread-86054 [Sensor: GDB01SQL] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-07 09:03:08,115 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 09:03:08,225 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 09:03:08,225 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 09:03:08,225 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 09:03:08,225 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 09:03:08,240 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 09:03:08,287 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 09:03:08,303 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 09:03:08,303 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 09:03:08,303 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 09:03:08,303 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 09:03:08,303 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 09:03:08,303 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 09:03:08,303 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 09:05:00,162 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 09:05:00,162 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 09:05:00,162 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 09:05:00,162 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 09:05:00,178 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 09:05:00,194 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 09:05:00,209 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 09:05:00,209 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 09:05:00,209 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 09:05:00,209 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 09:05:00,225 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 09:05:00,225 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 09:05:00,225 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 09:31:51,740 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 09:31:51,756 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 09:31:51,756 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 09:31:51,756 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 09:31:51,772 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 09:31:51,819 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 09:31:51,834 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 09:31:51,834 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Default
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 09:31:51,834 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 09:31:51,834 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 09:31:51,834 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 09:31:51,834 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 09:31:51,834 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 10:04:03,725 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 10:04:03,740 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 10:04:03,740 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 10:04:03,740 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 10:04:03,740 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 10:04:03,787 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 10:04:03,803 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 10:04:03,803 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 10:04:03,803 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 10:04:03,803 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 10:04:03,803 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 10:04:03,803 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 10:04:03,803 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 10:05:00,662 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 10:05:00,662 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 10:05:00,662 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 10:05:00,662 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 10:05:00,678 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 10:05:00,912 Collectors.3384.wGroup.[workinggroup0].Sensor.[Sensor_0] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", kdc: "gdb03dc.bgf.gobierno.pr."
INFO 2012-02-07 10:05:00,912 Collectors.3384.wGroup.[workinggroup0].Sensor.[Sensor_0] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-07 10:05:00,928 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 10:05:00,944 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 10:05:00,944 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 10:05:00,944 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 10:05:00,944 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 10:05:00,944 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-07 10:05:00,944 Collectors.3384.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-07 10:05:01,959 Collectors.3384.wGroup.[workinggroup0].Sensor.[Sensor_0] Thread-87172 Subscription error. Details: java.net.ConnectException: Connection refused: connect
ERROR 2012-02-07 10:05:01,959 Collectors.3384.wGroup.[workinggroup0].SensorThread Thread-87172 [Sensor: Sensor 0] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-07 10:09:41,272 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 10:09:41,287 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 10:09:41,287 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 10:09:41,287 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 10:09:41,287 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 10:09:41,287 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 10:09:41,319 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 10:09:41,319 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 10:09:41,319 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 10:09:41,319 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 10:09:41,334 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 10:09:41,334 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 10:09:41,334 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 10:09:41,334 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 10:09:41,334 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 10:09:41,334 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 10:15:31,678 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 10:15:31,678 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 10:15:31,678 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 10:15:31,678 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 10:15:31,694 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 10:15:31,725 Collectors.3384.wGroup.[workinggroup0].Sensor.[Sensor_0] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", kdc: "gdb03dc.bgf.gobierno.pr."
INFO 2012-02-07 10:15:31,725 Collectors.3384.wGroup.[workinggroup0].Sensor.[Sensor_0] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-07 10:15:31,756 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 10:15:31,772 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 10:15:31,772 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 10:15:31,772 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 10:15:31,772 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 10:15:31,772 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-07 10:15:31,772 Collectors.3384.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-07 10:15:32,803 Collectors.3384.wGroup.[workinggroup0].Sensor.[Sensor_0] Thread-87340 Subscription error. Details: java.net.ConnectException: Connection refused: connect
ERROR 2012-02-07 10:15:32,803 Collectors.3384.wGroup.[workinggroup0].SensorThread Thread-87340 [Sensor: Sensor 0] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-07 10:22:09,662 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 10:22:09,694 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 10:22:09,694 Collectors.3384 com.symantec.management.util.TimerThread collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 10:22:09,694 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 10:22:09,694 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-07 10:22:09,694 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 10:22:09,740 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 10:22:09,756 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 10:22:09,756 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 10:22:09,756 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 10:22:09,756 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 10:22:09,756 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 10:22:09,756 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 10:22:09,756 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-07 11:49:02,319 Collectors.3384.wGroup.[workinggroup0] Thread-88787 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-07 11:49:02,319 Collectors.3384 Thread-88787 collector instance: 33840101 and its WorkingGroups are stopped
INFO 2012-02-07 11:49:02,334 Collectors.3384.aggregator.AggregatorCacheImpl Thread-88787 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-07 11:49:02,350 Collectors.3384 Thread-88787 ---------------- collector stopped ----------------
DEBUG 2012-02-07 11:49:20,475 Collectors.3384.sender main clientInit() is called, 3384 33840101 4.4 127.0.0.1 8086
INFO 2012-02-07 11:49:26,975 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
DEBUG 2012-02-07 11:49:26,975 Collectors.3384 com.symantec.management.util.TimerThread Raw Event Logging Enabled: false
DEBUG 2012-02-07 11:49:26,975 Collectors.3384 com.symantec.management.util.TimerThread Trying to initialize all configured working groups ...
DEBUG 2012-02-07 11:49:26,975 Collectors.3384 com.symantec.management.util.TimerThread We have config for 1 working groups.
DEBUG 2012-02-07 11:49:26,975 Collectors.3384 com.symantec.management.util.TimerThread We have config for working group "workinggroup0"
DEBUG 2012-02-07 11:49:26,975 Collectors.3384 com.symantec.management.util.TimerThread Try to init "workinggroup0" group
DEBUG 2012-02-07 11:49:27,006 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread INIT: sensor list & sensors thread list cleared.
DEBUG 2012-02-07 11:49:27,006 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread [Collector:Windows 2008 Servers] Trying to inititialize 1 sensor...
DEBUG 2012-02-07 11:49:27,006 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Sensor Sensor 0 is not enabled. Skipping initialization...
DEBUG 2012-02-07 11:49:27,006 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread 0 sensor has been initialized.
DEBUG 2012-02-07 11:49:27,037 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Successful parsing of: D:\Program Files\Symantec\Event Agent\collectors\uvista\workinggroup0.xml
INFO 2012-02-07 11:49:27,287 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
DEBUG 2012-02-07 11:49:27,287 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread Created 1 specification
DEBUG 2012-02-07 11:49:27,303 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread Plugin "com.symantec.cas.ucf.translator.plugin.uvista.UVistaTranslatorPlugin" is loaded.
DEBUG 2012-02-07 11:49:27,303 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread Global plugin for translation was loaded
DEBUG 2012-02-07 11:49:27,334 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group enabled :true
INFO 2012-02-07 11:49:27,334 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
DEBUG 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Working group initialized.
INFO 2012-02-07 11:49:27,334 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
DEBUG 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Aggregator initialized.
DEBUG 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Event filter initialized.
INFO 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 11:49:27,334 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
DEBUG 2012-02-07 11:49:27,381 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread AGGREGATOR BUFFER: BUFFER has been initialized with capacity: 0 bytes (NOT-ACTIVE buffer). Active buffers: 0 for all collectors. 0 enabled specs.
DEBUG 2012-02-07 11:49:27,381 Collectors.3384 com.symantec.management.util.TimerThread Creating statistics object for collector.
INFO 2012-02-07 11:49:27,381 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
DEBUG 2012-02-07 11:49:27,381 Collectors.3384.Statistics com.symantec.management.util.TimerThread Starting statistics for collector at period of :300000 ms.
INFO 2012-02-07 11:49:27,381 Collectors.3384 com.symantec.management.util.TimerThread Sender started
DEBUG 2012-02-07 11:49:27,381 Collectors.3384 com.symantec.management.util.TimerThread Restoring sender queue...
INFO 2012-02-07 11:49:27,397 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 11:49:27,397 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 11:49:27,397 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 11:49:27,397 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
DEBUG 2012-02-07 11:49:27,397 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Sensor list is empty !
WARN 2012-02-07 11:49:27,397 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 11:49:27,397 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
DEBUG 2012-02-07 11:49:35,834 Collectors.3384 Thread-21 --------------- The stop is requested... -----------------
INFO 2012-02-07 11:49:35,834 Collectors.3384.wGroup.[workinggroup0] Thread-21 All sensors are stopped. Terminating workinggroup0 working group...
DEBUG 2012-02-07 11:49:35,834 Collectors.3384 Thread-21 Working group thread over.
INFO 2012-02-07 11:49:35,834 Collectors.3384 Thread-21 collector instance: 33840101 and its WorkingGroups are stopped
DEBUG 2012-02-07 11:49:35,850 Collectors.3384 Thread-21 Stopping... aggregator buffer flush requesting...
DEBUG 2012-02-07 11:49:35,850 Collectors.3384.aggregator.AggregatorCacheImpl Thread-21 BUFFER MAIN: FLUSH all values and clear buffer.
INFO 2012-02-07 11:49:35,850 Collectors.3384.aggregator.AggregatorCacheImpl Thread-21 Aggregator BUFFER has been flushed and cleared. Capacity: 0
DEBUG 2012-02-07 11:49:35,850 Collectors.3384.aggregator Thread-21 AGGREGATOR: FLUSH aggregator and buffer.
DEBUG 2012-02-07 11:49:35,850 Collectors.3384 Thread-21 Stopping... aggregator buffer flushed.
DEBUG 2012-02-07 11:49:35,850 Collectors.3384 Thread-21 Stopping... Waiting until event sender queue not is empty...
DEBUG 2012-02-07 11:49:35,850 Collectors.3384 Thread-21 Stopping... Event sender queue is empty.
DEBUG 2012-02-07 11:49:35,850 Collectors.3384.Statistics Thread-21 Statistics stopped for collector.
INFO 2012-02-07 11:49:35,850 Collectors.3384 Thread-21 ---------------- collector stopped ----------------
DEBUG 2012-02-07 11:49:35,928 Collectors.3384 Thread-12 COLLECTOR: SHUTDOWN: The stop is requested.
DEBUG 2012-02-07 11:49:35,928 Collectors.3384 Thread-12 COLLECTOR: SHUTDOWN: The collector already stopped.
DEBUG 2012-02-07 11:49:49,694 Collectors.3384.sender main clientInit() is called, 3384 33840101 4.4 127.0.0.1 8086
INFO 2012-02-07 11:49:56,287 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
DEBUG 2012-02-07 11:49:56,287 Collectors.3384 com.symantec.management.util.TimerThread Raw Event Logging Enabled: false
DEBUG 2012-02-07 11:49:56,287 Collectors.3384 com.symantec.management.util.TimerThread Trying to initialize all configured working groups ...
DEBUG 2012-02-07 11:49:56,287 Collectors.3384 com.symantec.management.util.TimerThread We have config for 1 working groups.
DEBUG 2012-02-07 11:49:56,303 Collectors.3384 com.symantec.management.util.TimerThread We have config for working group "workinggroup0"
DEBUG 2012-02-07 11:49:56,303 Collectors.3384 com.symantec.management.util.TimerThread Try to init "workinggroup0" group
DEBUG 2012-02-07 11:49:56,319 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread INIT: sensor list & sensors thread list cleared.
DEBUG 2012-02-07 11:49:56,319 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread [Collector:Windows 2008 Servers] Trying to inititialize 1 sensor...
DEBUG 2012-02-07 11:49:56,319 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Sensor Sensor 0 is not enabled. Skipping initialization...
DEBUG 2012-02-07 11:49:56,319 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread 0 sensor has been initialized.
DEBUG 2012-02-07 11:49:56,365 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Successful parsing of: D:\Program Files\Symantec\Event Agent\collectors\uvista\workinggroup0.xml
INFO 2012-02-07 11:49:56,506 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
DEBUG 2012-02-07 11:49:56,506 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread Created 1 specification
DEBUG 2012-02-07 11:49:56,506 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread Plugin "com.symantec.cas.ucf.translator.plugin.uvista.UVistaTranslatorPlugin" is loaded.
DEBUG 2012-02-07 11:49:56,506 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread Global plugin for translation was loaded
DEBUG 2012-02-07 11:49:56,537 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group enabled :true
INFO 2012-02-07 11:49:56,537 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
DEBUG 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Working group initialized.
INFO 2012-02-07 11:49:56,537 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
DEBUG 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Aggregator initialized.
DEBUG 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Event filter initialized.
INFO 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 11:49:56,537 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
DEBUG 2012-02-07 11:49:56,553 Collectors.3384.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread AGGREGATOR BUFFER: BUFFER has been initialized with capacity: 0 bytes (NOT-ACTIVE buffer). Active buffers: 0 for all collectors. 0 enabled specs.
DEBUG 2012-02-07 11:49:56,553 Collectors.3384 com.symantec.management.util.TimerThread Creating statistics object for collector.
INFO 2012-02-07 11:49:56,553 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
DEBUG 2012-02-07 11:49:56,553 Collectors.3384.Statistics com.symantec.management.util.TimerThread Starting statistics for collector at period of :300000 ms.
INFO 2012-02-07 11:49:56,569 Collectors.3384 com.symantec.management.util.TimerThread Sender started
DEBUG 2012-02-07 11:49:56,569 Collectors.3384 com.symantec.management.util.TimerThread Restoring sender queue...
INFO 2012-02-07 11:49:56,569 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 11:49:56,569 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 11:49:56,569 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 11:49:56,569 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
DEBUG 2012-02-07 11:49:56,569 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Sensor list is empty !
WARN 2012-02-07 11:49:56,569 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 11:49:56,569 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.
DEBUG 2012-02-07 11:54:32,115 Collectors.3384 Thread-88 --------------- The stop is requested... -----------------
INFO 2012-02-07 11:54:32,115 Collectors.3384.wGroup.[workinggroup0] Thread-88 All sensors are stopped. Terminating workinggroup0 working group...
DEBUG 2012-02-07 11:54:32,115 Collectors.3384 Thread-88 Working group thread over.
INFO 2012-02-07 11:54:32,115 Collectors.3384 Thread-88 collector instance: 33840101 and its WorkingGroups are stopped
DEBUG 2012-02-07 11:54:32,131 Collectors.3384 Thread-88 Stopping... aggregator buffer flush requesting...
DEBUG 2012-02-07 11:54:32,131 Collectors.3384.aggregator.AggregatorCacheImpl Thread-88 BUFFER MAIN: FLUSH all values and clear buffer.
INFO 2012-02-07 11:54:32,131 Collectors.3384.aggregator.AggregatorCacheImpl Thread-88 Aggregator BUFFER has been flushed and cleared. Capacity: 0
DEBUG 2012-02-07 11:54:32,131 Collectors.3384.aggregator Thread-88 AGGREGATOR: FLUSH aggregator and buffer.
DEBUG 2012-02-07 11:54:32,131 Collectors.3384 Thread-88 Stopping... aggregator buffer flushed.
DEBUG 2012-02-07 11:54:32,131 Collectors.3384 Thread-88 Stopping... Waiting until event sender queue not is empty...
DEBUG 2012-02-07 11:54:32,131 Collectors.3384 Thread-88 Stopping... Event sender queue is empty.
DEBUG 2012-02-07 11:54:32,131 Collectors.3384.Statistics Thread-88 Statistics stopped for collector.
INFO 2012-02-07 11:54:32,131 Collectors.3384 Thread-88 ---------------- collector stopped ----------------
DEBUG 2012-02-07 11:54:32,147 Collectors.3384 Thread-12 COLLECTOR: SHUTDOWN: The stop is requested.
DEBUG 2012-02-07 11:54:32,147 Collectors.3384 Thread-12 COLLECTOR: SHUTDOWN: The collector already stopped.
INFO 2012-02-07 11:54:53,928 Collectors.3384 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-07 11:54:54,131 Collectors.3384.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 1 translator specifications exist.
INFO 2012-02-07 11:54:54,162 Collectors.3384.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-07 11:54:54,162 Collectors.3384.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-07 11:54:54,162 Collectors.3384 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-07 11:54:54,162 Collectors.3384 com.symantec.management.util.TimerThread Product ID: 3384
INFO 2012-02-07 11:54:54,162 Collectors.3384 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-07 11:54:54,162 Collectors.3384 com.symantec.management.util.TimerThread Software feature ID: 33840101
INFO 2012-02-07 11:54:54,162 Collectors.3384 com.symantec.management.util.TimerThread Framework version: 2.43.00
INFO 2012-02-07 11:54:54,162 Collectors.3384 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-07 11:54:54,178 Collectors.3384 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-07 11:54:54,194 Collectors.3384 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-07 11:54:54,194 Collectors.3384 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33840101, group name: "workinggroup0")
INFO 2012-02-07 11:54:54,194 Collectors.3384 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-07 11:54:54,194 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-07 11:54:54,194 Collectors.3384.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-07 11:54:54,194 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !
INFO 2012-02-07 11:54:54,194 Collectors.3384.wGroup.[workinggroup0] workinggroup0 Working group is off.

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

Avkash K

Hi, It seems like no sensor

Hi,

It seems like no sensor config is still loaded to the Agent.

WARN 2012-02-07 11:54:54,194 Collectors.3384.wGroup.[workinggroup0] workinggroup0 No valid sensors in workinggroup !

As you can see in above erroe that no valid sensor in workgroup, means no sensor setting has been applied to this Agent/collector.

Please confirm below points..

Enable the sensor.

Distribute the sensor settings.

check the services tab under computer properties of target computer, whether all services are in sync or not??

if not, then try re-bootstraping the Agent.

Regards,

Avkash K

Feb

2012

0 Votes 0

HEMANPR

Here my Event Screen

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

1 Vote +1

olaf

Symantec Employee

Accredited

You are posting uvista.log

You are posting uvista.log and uwindows.log?

Thta would mean you have the Universal Collectors installed on this agent.

Did you actually install the right collectors on the agent (not universal)?

For normal collection you shouldn't use the Universal Collectors. Please uninstall them on the Agent machine and install the real collectors.

Feb

2012

0 Votes 0

HEMANPR

Yes I do...I install the

Yes I do...

I install the Windows Event Collector 4.3 and Windows Event Collector for Vista 4.4

I configured the Sensor for the Windows Event Collectors Products.

The same issue. Security Logs are not received by SSIM

Here the Sensor configuration for Windows 2003 Servers. I add the Windows 2003 Servers on the Collector Properties --> Computers.

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

HEMANPR

Here the Sensor configuration

Here the Sensor configuration for Windows 2008 Servers. I add the Windows 2008 Servers on the Collector Properties --> Computers.

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

olaf

Symantec Employee

Accredited

Well looking at the

Well looking at the screenshots you posted the Sensors are not enabled.

Feb

2012

0 Votes 0

HEMANPR

Yes I set the Sensor to

Yes I set the Sensor to ENABLE and SSIM receive the Windows 2003 Servers Security Logs.

For some reason Windows 2008 are not sended the security Logs. I do the following steps recomended by Symantec without look:

In CMD

1. net localgroup "Event Log Readers" /add "NT Authority\Network Service"

2. winrm quickconfig

3. winrm set winrm/config/service @{AllowUnencrypted="true"}

4. winrm set winrm/config/service/Auth @{Basic="true"}

I change the port for the 443 and HTTPS. No Luck : (

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

Avkash K

if you set the

if you set the allowunencrypted true then try using HTTP only & not the HTTPS.

Also confirm the WinRM version:

if it's 1.1 then you can use port 80 in sensor config.

if it's 2.0 then you should use 5985 in sensor config.

This are the default ports for the Winrm.

Regards,

Avkash K

Feb

2012

0 Votes 0

Avkash K

Also confirm the user id you

Also confirm the user id you are using for the config.

If you are using local ID then use Auth Basic = True

if you are using domain account then use Basic= False & set kerberos=true.

Regards,

Avkash K

Feb

2012

0 Votes 0

Milan_T

Try and Try u will be success and if not will have new forum.

HI HEMANPR,

look some time big problems needs to change small tickmarks.

i think avkash and Shahnawaz sent u best solution.

try to refresh Agent at windows server and try to resolve the same.

BEST LUCK.

Feb

2012

0 Votes 0

HEMANPR

Guys I try all those

Guys I try all those options:

I do the test using both ports but not work on any port (Also 443).

if it's 1.1 then you can use port 80 in sensor config.

if it's 2.0 then you should use 5985 in sensor config.

I change this on the WinRM and dont work:

If you are using local ID then use Auth Basic = True

if you are using domain account then use Basic= False & set kerberos=true.

I do this but dont work..

try to refresh Agent at windows server and try to resolve the same.

What can be wrong here?

This is the steps what i do on Servers 2008 Servers:

I Install the agent for Windows

I Install the MSVista Collector

I run the WinRM Commands

Add the NT Network and the Sensor User to EventLog Reader Group

Create the sensor and add the Windows 2008 Servers in computers (View The Image)

Any idea about what Im doing wrong?

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

smakovits

I may have missed it, but I

I may have missed it, but I am trying to confirm. 2003 is working, but for 2008 you only get partial data or are you getting no data at all?

Feb

2012

0 Votes 0

HEMANPR

Yes Windows 2003 Servers are

Yes

Windows 2003 Servers are working fine. The issue is with Windows 2008 Server. Thre ar not send the Security Logs to the SSIM.

Application and Diagnostic logs are receive on the SSIM for Windows 2008 Servers

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

Avkash K

Hi, Please confirm , are

Hi,

Please confirm , are youusing domain account.

If yes then you should fill the monitored host realm field with your domain name

& also in user name only write user name don't put domain name before user name.

Try this, if still it does't work then please let me knwo the erroe you are getting in msvistacollector.log file.

Regards,

Avkash K

Feb

2012

0 Votes 0

HEMANPR

Here the

Here the MSVISTA.LOG

INFO 2012-02-09 08:39:54,686 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:39:54,874 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", kdc: "gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 08:39:54,905 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 08:39:55,311 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:39:55,390 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:39:55,390 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:39:55,421 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:39:55,421 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:39:55,421 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:39:55,421 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:39:55,421 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.42.00
INFO 2012-02-09 08:39:55,421 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.01.00
INFO 2012-02-09 08:39:55,421 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:39:55,468 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:39:55,468 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:39:55,483 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:39:55,483 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:39:55,483 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 08:39:55,483 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
INFO 2012-02-09 08:39:55,499 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
ERROR 2012-02-09 08:39:55,718 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-19 Subscription error. Details: java.io.IOException: Unauthorized access. Status: 401. It is possible you provided incorrect Kerberos configuration.
ERROR 2012-02-09 08:39:55,718 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 08:40:00,718 Collectors.3301.wGroup.[workinggroup0] Thread-22 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:40:00,749 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:40:00,749 Collectors.3301 Thread-22 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:40:00,749 Collectors.3301.aggregator.AggregatorCacheImpl Thread-22 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:40:00,749 Collectors.3301 Thread-22 ---------------- collector stopped ----------------
INFO 2012-02-09 08:40:20,999 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:40:21,155 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 08:40:21,171 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 08:40:21,546 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:40:21,608 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:40:21,624 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:40:21,640 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:40:21,640 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:40:21,640 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:40:21,640 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:40:21,640 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.42.00
INFO 2012-02-09 08:40:21,640 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:40:21,640 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:40:21,655 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:40:21,655 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:40:21,655 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:40:21,671 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:40:21,671 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 08:40:21,671 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
INFO 2012-02-09 08:40:21,671 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
ERROR 2012-02-09 08:40:21,843 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] Number of authentication errors in sensor exceeded maxinum specified for this collector.
INFO 2012-02-09 08:40:21,843 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] >>> Close sensor thread...
INFO 2012-02-09 08:40:26,499 Collectors.3301.wGroup.[workinggroup0] Thread-22 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:40:26,593 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:40:26,593 Collectors.3301 Thread-22 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:40:26,593 Collectors.3301.aggregator.AggregatorCacheImpl Thread-22 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:40:26,593 Collectors.3301 Thread-22 ---------------- collector stopped ----------------
INFO 2012-02-09 08:40:48,561 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:40:48,702 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 08:40:48,718 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 08:40:49,061 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:40:49,124 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:40:49,124 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:40:49,140 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:40:49,140 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:40:49,140 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:40:49,140 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:40:49,140 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:40:49,140 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:40:49,140 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:40:49,140 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:40:49,155 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:40:49,155 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:40:49,171 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:40:49,171 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:40:49,171 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:40:49,171 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 08:40:49,171 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 08:40:49,343 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-20 [Sensor: Windows 2008 Sensor] Number of authentication errors in sensor exceeded maximum specified for this collector.
INFO 2012-02-09 08:40:49,358 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-20 [Sensor: Windows 2008 Sensor] >>> Close sensor thread...
INFO 2012-02-09 08:41:07,280 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:41:07,327 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:41:07,327 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:41:07,327 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:41:07,327 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 08:41:07,343 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:41:07,358 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 08:41:07,374 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 08:41:07,452 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:41:07,499 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:41:07,499 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:41:07,499 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:41:07,499 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:41:07,499 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:41:07,499 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 08:41:07,515 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 08:41:07,530 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-28 [Sensor: Windows 2008 Sensor] Number of authentication errors in sensor exceeded maximum specified for this collector.
INFO 2012-02-09 08:41:07,530 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-28 [Sensor: Windows 2008 Sensor] >>> Close sensor thread...
INFO 2012-02-09 08:43:01,999 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:43:02,061 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:43:02,061 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:43:02,061 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:43:02,061 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 08:43:02,077 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:43:02,108 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 08:43:02,108 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 08:43:02,171 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:43:02,202 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:43:02,202 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:43:02,202 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:43:02,202 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:43:02,202 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:43:02,202 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 08:43:02,218 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 08:43:02,233 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-60 [Sensor: Windows 2008 Sensor] Number of authentication errors in sensor exceeded maximum specified for this collector.
INFO 2012-02-09 08:43:02,233 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-60 [Sensor: Windows 2008 Sensor] >>> Close sensor thread...
INFO 2012-02-09 08:43:04,155 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:43:04,186 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:43:04,186 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:43:04,186 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:43:04,186 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 08:43:04,202 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:43:04,265 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:43:04,296 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:43:04,296 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:43:04,296 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:43:04,296 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:43:04,296 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:43:04,296 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-09 08:43:04,296 Collectors.3301.wGroup.[workinggroup0] workinggroup0 No valid sensors in WorkingGroup !
INFO 2012-02-09 08:43:04,296 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:43:55,061 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:43:55,061 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:43:55,061 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:43:55,061 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 08:43:55,077 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:43:55,124 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:43:55,155 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:43:55,155 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:43:55,155 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:43:55,155 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:43:55,155 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:43:55,155 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-09 08:43:55,155 Collectors.3301.wGroup.[workinggroup0] workinggroup0 No valid sensors in WorkingGroup !
INFO 2012-02-09 08:43:55,155 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:44:00,030 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:44:00,030 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:44:00,030 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:44:00,046 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 08:44:00,046 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:44:00,077 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 08:44:00,077 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 08:44:00,093 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:44:00,124 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:44:00,124 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:44:00,124 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:44:00,124 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:44:00,124 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:44:00,124 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 08:44:00,124 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 08:44:01,171 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-82 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 08:44:01,171 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-82 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 08:44:17,249 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:44:17,311 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:44:17,311 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:44:17,311 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:44:17,311 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 08:44:17,327 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:44:17,343 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 08:44:17,343 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 08:44:17,374 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:44:17,405 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:44:17,405 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:44:17,405 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:44:17,405 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:44:17,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:44:17,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 08:44:17,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 08:44:18,436 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-90 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 08:44:18,436 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-90 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 08:45:26,796 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:45:26,905 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:45:26,905 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:45:26,905 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:45:26,905 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 08:45:26,905 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:45:26,952 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:45:26,968 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:45:26,968 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:45:26,968 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:45:26,968 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:45:26,968 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:45:26,968 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-09 08:45:26,968 Collectors.3301.wGroup.[workinggroup0] workinggroup0 No valid sensors in WorkingGroup !
INFO 2012-02-09 08:45:26,968 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 08:49:03,390 Collectors.3301.wGroup.[workinggroup0] Thread-173 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 08:49:03,390 Collectors.3301 Thread-173 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 08:49:03,390 Collectors.3301.aggregator.AggregatorCacheImpl Thread-173 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 08:49:03,405 Collectors.3301 Thread-173 ---------------- collector stopped ----------------
INFO 2012-02-09 08:50:01,108 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 08:50:01,515 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 08:50:01,593 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 08:50:01,593 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 08:50:01,608 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 08:50:01,608 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 08:50:01,608 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 08:50:01,608 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 08:50:01,608 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 08:50:01,608 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 08:50:01,608 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 08:50:01,921 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 08:50:01,921 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 08:50:01,936 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 08:50:01,936 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 08:50:01,936 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 08:50:01,936 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
WARN 2012-02-09 08:50:01,936 Collectors.3301.wGroup.[workinggroup0] workinggroup0 No valid sensors in WorkingGroup !
INFO 2012-02-09 08:50:01,936 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 10:00:17,827 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 10:00:17,842 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 10:00:17,842 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 10:00:17,842 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 10:00:17,858 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 10:00:17,874 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-09 10:00:17,983 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 10:00:18,030 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 10:00:18,030 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 10:00:18,030 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 10:00:18,030 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 10:00:18,030 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 10:00:18,030 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 10:00:18,030 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 10:00:18,374 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-1107 [Sensor: Windows 2008 Sensor] Number of authentication errors in sensor exceeded maximum specified for this collector.
INFO 2012-02-09 10:00:18,374 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-1107 [Sensor: Windows 2008 Sensor] >>> Close sensor thread...
INFO 2012-02-09 11:04:43,717 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 11:04:43,749 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 11:04:43,749 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 11:04:43,749 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 11:04:43,749 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 11:04:44,092 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 11:04:44,108 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-09 11:04:44,202 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 11:04:44,233 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 11:04:44,233 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 11:04:44,233 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 11:04:44,233 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 11:04:44,233 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 11:04:44,233 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 11:04:44,233 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 11:04:44,233 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 11:04:44,233 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 11:04:44,233 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 11:04:44,296 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 11:04:44,296 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 11:04:44,296 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 11:04:44,296 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 11:04:44,296 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 11:04:44,296 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 11:04:44,296 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 11:04:45,342 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-2120 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 11:04:45,342 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-2120 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 11:05:01,421 Collectors.3301.wGroup.[workinggroup0] Thread-2128 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 11:05:01,499 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 11:05:01,499 Collectors.3301 Thread-2128 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 11:05:01,499 Collectors.3301.aggregator.AggregatorCacheImpl Thread-2128 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 11:05:01,499 Collectors.3301 Thread-2128 ---------------- collector stopped ----------------
INFO 2012-02-09 11:05:43,702 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 11:05:44,124 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-09 11:05:44,749 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 11:05:44,842 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 11:05:44,842 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 11:05:44,874 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 11:05:44,874 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 11:05:44,874 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 11:05:44,874 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 11:05:44,874 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 11:05:44,874 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 11:05:44,874 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 11:05:44,874 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 11:05:44,952 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 11:05:44,952 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 11:05:44,952 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 11:05:44,952 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 11:05:44,967 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 11:05:44,967 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 11:05:44,967 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 11:05:46,311 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-18 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 11:05:46,311 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-18 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 13:07:04,405 Collectors.3301.wGroup.[workinggroup0] Thread-1888 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 13:07:04,483 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 13:07:04,483 Collectors.3301 Thread-1888 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 13:07:04,483 Collectors.3301.aggregator.AggregatorCacheImpl Thread-1888 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 13:07:04,483 Collectors.3301 Thread-1888 ---------------- collector stopped ----------------
INFO 2012-02-09 13:09:11,811 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 13:09:11,967 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos not initialized.
INFO 2012-02-09 13:09:12,467 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 13:09:12,546 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 13:09:12,546 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 13:09:12,561 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 13:09:12,561 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 13:09:12,561 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 13:09:12,561 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 13:09:12,561 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 13:09:12,561 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 13:09:12,561 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 13:09:12,561 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 13:09:12,639 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 13:09:12,639 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 13:09:12,655 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 13:09:12,655 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 13:09:12,655 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 13:09:12,655 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 13:09:12,655 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 13:09:13,936 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-18 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 13:09:13,936 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-18 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 13:36:02,030 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 13:36:02,108 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 13:36:02,108 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 13:36:02,108 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 13:36:02,108 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 13:36:02,124 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 13:36:02,249 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 13:36:02,249 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 13:36:02,358 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 13:36:02,405 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 13:36:02,405 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 13:36:02,405 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 13:36:02,405 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 13:36:02,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 13:36:02,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 13:36:02,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 13:36:03,452 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-434 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 13:36:03,452 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-434 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 13:44:52,139 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 13:44:52,217 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 13:44:52,217 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 13:44:52,217 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 13:44:52,217 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-09 13:44:52,233 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 13:44:52,264 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 13:44:52,264 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 13:44:52,358 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 13:44:52,405 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 13:44:52,405 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 13:44:52,405 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 13:44:52,405 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 13:44:52,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 13:44:52,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 13:44:52,405 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 13:44:53,421 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-576 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 13:44:53,421 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-576 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 14:11:20,499 Collectors.3301.wGroup.[workinggroup0] Thread-986 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 14:11:20,590 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 14:11:20,590 Collectors.3301 Thread-986 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 14:11:20,600 Collectors.3301.aggregator.AggregatorCacheImpl Thread-986 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 14:11:20,602 Collectors.3301 Thread-986 ---------------- collector stopped ----------------
INFO 2012-02-09 14:17:45,019 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 14:17:45,269 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 14:17:45,300 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 14:17:45,753 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 14:17:45,847 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 14:17:45,847 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 14:17:45,863 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 14:17:45,863 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 14:17:45,863 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 14:17:45,863 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 14:17:45,863 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 14:17:45,863 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 14:17:45,863 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 14:17:45,863 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 14:17:45,925 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 14:17:45,925 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 14:17:45,925 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 14:17:45,925 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 14:17:45,925 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 14:17:45,941 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 14:17:45,941 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 14:17:47,175 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-19 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 14:17:47,175 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 14:24:50,373 Collectors.3301.wGroup.[workinggroup0] Thread-132 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 14:24:50,386 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 14:24:50,386 Collectors.3301 Thread-132 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 14:24:50,389 Collectors.3301.aggregator.AggregatorCacheImpl Thread-132 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 14:24:50,391 Collectors.3301 Thread-132 ---------------- collector stopped ----------------
INFO 2012-02-09 14:29:49,371 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 14:29:49,558 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 14:29:49,574 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 14:29:49,933 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 14:29:50,012 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 14:29:50,012 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 14:29:50,027 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 14:29:50,027 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 14:29:50,027 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 14:29:50,027 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 14:29:50,027 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 14:29:50,027 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 14:29:50,027 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 14:29:50,027 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 14:29:50,043 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 14:29:50,043 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 14:29:50,058 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 14:29:50,058 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 14:29:50,058 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 14:29:50,058 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 14:29:50,058 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 14:29:51,230 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-19 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 14:29:51,230 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 14:32:03,927 Collectors.3301.wGroup.[workinggroup0] Thread-55 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 14:32:03,975 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 14:32:03,975 Collectors.3301 Thread-55 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 14:32:03,979 Collectors.3301.aggregator.AggregatorCacheImpl Thread-55 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 14:32:03,983 Collectors.3301 Thread-55 ---------------- collector stopped ----------------
INFO 2012-02-09 14:46:43,313 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 14:46:43,469 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 14:46:43,469 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 14:46:43,797 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 14:46:43,875 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 14:46:43,875 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 14:46:43,891 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 14:46:43,891 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 14:46:43,891 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 14:46:43,891 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 14:46:43,891 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 14:46:43,891 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 14:46:43,891 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 14:46:43,891 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 14:46:43,907 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 14:46:43,907 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 14:46:43,907 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 14:46:43,907 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 14:46:43,907 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 14:46:43,922 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 14:46:43,922 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 14:46:45,078 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-20 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 14:46:45,078 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-20 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 14:53:46,191 Collectors.3301.wGroup.[workinggroup0] Thread-130 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 14:53:46,205 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 14:53:46,205 Collectors.3301 Thread-130 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 14:53:46,209 Collectors.3301.aggregator.AggregatorCacheImpl Thread-130 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 14:53:46,211 Collectors.3301 Thread-130 ---------------- collector stopped ----------------
INFO 2012-02-09 15:45:03,933 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 15:45:04,199 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 15:45:04,230 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 15:45:04,652 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 15:45:04,730 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 15:45:04,730 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 15:45:04,761 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 15:45:04,761 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 15:45:04,761 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 15:45:04,761 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 15:45:04,761 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 15:45:04,761 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 15:45:04,761 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 15:45:04,761 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 15:45:04,808 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 15:45:04,808 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 15:45:04,808 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 15:45:04,808 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 15:45:04,808 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 15:45:04,824 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 15:45:04,824 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 15:45:06,058 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-19 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 15:45:06,058 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 15:52:09,310 Collectors.3301.wGroup.[workinggroup0] Thread-130 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 15:52:09,355 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 15:52:09,355 Collectors.3301 Thread-130 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 15:52:09,358 Collectors.3301.aggregator.AggregatorCacheImpl Thread-130 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 15:52:09,361 Collectors.3301 Thread-130 ---------------- collector stopped ----------------
INFO 2012-02-09 15:55:16,814 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 15:55:16,985 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 15:55:17,001 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 15:55:17,345 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 15:55:17,423 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 15:55:17,423 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 15:55:17,439 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 15:55:17,439 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 15:55:17,439 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 15:55:17,439 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 15:55:17,439 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 15:55:17,439 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 15:55:17,439 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 15:55:17,439 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 15:55:17,454 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 15:55:17,470 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 15:55:17,470 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 15:55:17,470 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 15:55:17,470 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 15:55:17,470 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 15:55:17,470 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 15:55:18,657 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-19 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 15:55:18,657 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 16:02:22,771 Collectors.3301.wGroup.[workinggroup0] Thread-130 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 16:02:22,833 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 16:02:22,833 Collectors.3301 Thread-130 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 16:02:22,836 Collectors.3301.aggregator.AggregatorCacheImpl Thread-130 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 16:02:22,839 Collectors.3301 Thread-130 ---------------- collector stopped ----------------
INFO 2012-02-09 16:39:44,639 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-09 16:39:45,124 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-09 16:39:45,170 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-09 16:39:45,764 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-09 16:39:45,874 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-09 16:39:45,874 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-09 16:39:45,889 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-09 16:39:45,889 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-09 16:39:45,889 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-09 16:39:45,889 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-09 16:39:45,889 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-09 16:39:45,889 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-09 16:39:45,889 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-09 16:39:45,889 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-09 16:39:45,983 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-09 16:39:45,983 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-09 16:39:45,999 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-09 16:39:45,999 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-09 16:39:45,999 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-09 16:39:46,014 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-09 16:39:46,014 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-09 16:39:47,405 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-19 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-09 16:39:47,405 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-09 16:41:59,463 Collectors.3301.wGroup.[workinggroup0] Thread-55 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-09 16:41:59,522 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-09 16:41:59,523 Collectors.3301 Thread-55 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-09 16:41:59,543 Collectors.3301.aggregator.AggregatorCacheImpl Thread-55 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-09 16:41:59,551 Collectors.3301 Thread-55 ---------------- collector stopped ----------------
INFO 2012-02-10 08:48:06,996 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-10 08:48:07,293 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-10 08:48:07,340 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-10 08:48:07,809 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-10 08:48:07,934 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-10 08:48:07,934 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-10 08:48:07,949 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-10 08:48:07,949 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-10 08:48:07,949 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-10 08:48:07,949 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-10 08:48:07,949 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-10 08:48:07,949 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-10 08:48:07,949 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-10 08:48:07,949 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-10 08:48:08,012 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-10 08:48:08,012 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-10 08:48:08,012 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-10 08:48:08,012 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-10 08:48:08,012 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-10 08:48:08,012 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-10 08:48:08,012 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-10 08:48:09,356 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-19 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-10 08:48:09,356 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-19 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-10 08:55:12,653 Collectors.3301.wGroup.[workinggroup0] Thread-130 All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-10 08:55:12,758 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-10 08:55:12,759 Collectors.3301 Thread-130 collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-10 08:55:12,762 Collectors.3301.aggregator.AggregatorCacheImpl Thread-130 Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-10 08:55:12,764 Collectors.3301 Thread-130 ---------------- collector stopped ----------------
INFO 2012-02-10 09:24:41,379 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-10 09:24:41,629 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-10 09:24:41,645 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-10 09:24:42,114 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-10 09:24:42,192 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-10 09:24:42,192 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-10 09:24:42,208 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-10 09:24:42,208 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-10 09:24:42,208 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-10 09:24:42,208 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-10 09:24:42,208 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-10 09:24:42,208 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-10 09:24:42,208 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-10 09:24:42,208 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-10 09:24:42,254 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-10 09:24:42,254 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-10 09:24:42,270 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-10 09:24:42,270 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-10 09:24:42,270 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-10 09:24:42,270 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-10 09:24:42,270 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-10 09:24:43,520 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-20 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-10 09:24:43,520 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-20 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...
INFO 2012-02-10 09:25:14,725 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread All sensors are stopped. Terminating workinggroup0 working group...
INFO 2012-02-10 09:25:14,756 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Working group is off.
INFO 2012-02-10 09:25:14,756 Collectors.3301 com.symantec.management.util.TimerThread collector instance: 33010101 and its WorkingGroups are stopped
INFO 2012-02-10 09:25:14,756 Collectors.3301.aggregator.AggregatorCacheImpl com.symantec.management.util.TimerThread Aggregator BUFFER has been flushed and cleared. Capacity: 0
INFO 2012-02-10 09:25:14,756 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector stopped ----------------
INFO 2012-02-10 09:25:14,772 Collectors.3301 com.symantec.management.util.TimerThread Initializing collector...
INFO 2012-02-10 09:25:14,803 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Realm: "BGF.GOBIERNO.PR", KDCs: "gdb02dc.bgf.gobierno.pr.,gdb03dc.bgf.gobierno.pr."
INFO 2012-02-10 09:25:14,803 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] com.symantec.management.util.TimerThread Kerberos authentication is enabled.
INFO 2012-02-10 09:25:14,913 Collectors.3301.wGroup.[workinggroup0].translator com.symantec.management.util.TimerThread 4 translator specifications exist.
INFO 2012-02-10 09:25:14,944 Collectors.3301.wGroup.[workinggroup0] com.symantec.management.util.TimerThread Working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor" initiated (enable: true).
INFO 2012-02-10 09:25:14,944 Collectors.3301.aggregator com.symantec.management.util.TimerThread AGGREGATOR has been initialized with: 0 specs. Enabled: 0, disabled: 0.
INFO 2012-02-10 09:25:14,944 Collectors.3301.filter com.symantec.management.util.TimerThread FILTER has been initialized with: 1 specs. Enabled: 0, disabled: 1.
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Configuration: Windows 2008 Servers
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Product ID: 3301
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Product version: 4.4
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Software feature ID: 33010101
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Framework version: 2.47.00
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Collector uses wsmanagement sensor v. 2.04.00
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Collector initialization completed.
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread --------- The start is requested... ------
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Sender started
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread Starting WorkingGroup (instance:33010101, group name: "workinggroup0")
INFO 2012-02-10 09:25:14,944 Collectors.3301 com.symantec.management.util.TimerThread ---------------- collector started. ----------------
INFO 2012-02-10 09:25:14,959 Collectors.3301.wGroup.[workinggroup0] workinggroup0 Starting working group for sensor "com.symantec.cas.ucf.sensors.ws_management.WSManagementSensor"...
INFO 2012-02-10 09:25:14,959 Collectors.3301.wGroup.[workinggroup0] workinggroup0 0 events were deserialized
INFO 2012-02-10 09:25:14,959 Collectors.3301.wGroup.[workinggroup0] workinggroup0 All sensor threads (1) have been created.
ERROR 2012-02-10 09:25:15,960 Collectors.3301.wGroup.[workinggroup0].Sensor.[Windows_2008_Sensor] Thread-31 Subscription error. Details: java.net.ConnectException: Connection refused: connect
WARN 2012-02-10 09:25:15,960 Collectors.3301.wGroup.[workinggroup0].SensorThread Thread-31 [Sensor: Windows 2008 Sensor] Sensor thread failed to open device. Trying to reopen...

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

Avkash K

Also post the output of below

Also post the output of below commands from win 2k8 server.

winrm get winrm/config

winrm enumerate winrm/config/Listener

wevtutil gl security.

This command will give me the exact idea about what you have configured &what version you are using.

Apart from this, below are the std. set of command drafted which i used to run in my environment for any 2008 integration. For using domain account

winrm quickconfig
winrm set winrm/config/service @{AllowUnencrypted="true"}
winrm set winrm/config/service/Auth @{Basic="false"}
winrm set winrm/config/Winrs @{AllowRemoteShellAccess="false"}
winrm configSDDL http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog
net localgroup "Event Log Readers" /add "NT Authority\Network Service"
wevtutil sl security /ca:O:BAG:SYD:(A;;0xf0005;;;SY)(A;;0x5;;;BA)(A;;0x1;;;S-1-5-32-573)(A;;0x1;;;S-1-5-20)
wevtutil sl security /ca:O:BAG:SYD:(A;;0xf0005;;;SY)(A;;0x5;;;BA)(A;;0x1;;;S-1-5-32-573)(A;;0x1;;;S-1-5-20)(A;;0x1;;;NS)
netsh advfirewall firewall add portopening TCP 5985 "Windows Remote Management"

Regards,

Avkash K

Feb

2012

0 Votes 0

HEMANPR

Here the image for those

Here the image for those command from a Windows 2008 Server

winrm get winrm/config

winrm enumerate winrm/config/Listener

wevtutil gl security.

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

smakovits

The period at the end of your

The period at the end of your command could be what is throwing the error in your last screenshot.

I ran the same test here and unless you delete the period at the end, you will get that error

Feb

2012

0 Votes 0

olaf

Symantec Employee

Accredited

Are you sure that there is no

Are you sure that there is no firewall blocking the port.

Connection refused: connect

That is the message in the log. That normally means that the port is blocked.

Can you make sure the port is open?

Feb

2012

0 Votes 0

olaf

Symantec Employee

Accredited

Just checked you sensor

Just checked you sensor properties you posted. Is it still set to port 80?

That should be port 5985 in your case.

Feb

2012

0 Votes 0

HEMANPR

Yes I change to use 5985

Same Issue

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

olaf

Symantec Employee

Accredited

If you are still getting

If you are still getting connection refused in the log it means that the port is blocked.

Please make sure that the port is open and that you can connect.

Feb

2012

0 Votes 0

smakovits

try to telnet on the port to

try to telnet on the port to the server

Feb

2012

0 Votes 0

Avkash K

try Telnet target_2008_IP

try

Telnet target_2008_IP 5985

Check the output, whether you are getting telnet or not???

if not, then either your local firewall or any other firewall is blocking winrm service port 5985.

Regards,

Avkash K

Feb

2012

0 Votes 0

HEMANPR

Another issue... Right now I

Another issue...

Right now I dont receive anything on my SSIM because I have all my Event Service Queues Completelly Full (In Red)

I dont have anithing in Summarizer.

This product is like a Magic Bag... any Suggestion?

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

Subhani

I faced similar issues

Regarding full queues ,don't worry .It will take some time and will settle down .One solution is to restart SSIM however that is not mostly applicable due to its critical nature however normally it settles down.If necessary ,just restart sesevents service .

Coming back to Windows vista logs collection ,I also spent lot of time troubleshooting when I wanted to get logs from Windows 2008 .Here I will make it simpler for you based on my experience .

You need to run following commands on Windows 2008 Servers .

1.winrm quickconfig (Press y to continue and paste the command mentioned below)

2. winrm set winrm/config/service @{AllowUnencrypted="true"}

The key settings here are that we allow unencrypted communications and Kerberos authentication for the winrm service.In your config ,I saw that it is set to false .

3. Define a Domain Admin user/Service account who should be able to access Server remotely or locally and Add him to Windows Event log reader group.

Domain\ssimlogreader

NT Authority\Network Service

You can use this command.

net localgroup "Event Log Readers" "NT Authority\Network Service" /add

net localgroup "Event Log Readers" "Domain\SsimLogReader" /add

4. To Set the Security descriptor on Windows event security log in order to read the events, run this command.This is very very important .

wevtutil sl security /ca:O:BAG:SYD:(A;;0xf0005;;;SY)(A;;0x5;;;BA)(A;;0x1;;;S-1-5-32-573)(A;;0x1;;;S-1-5-20)

5. Configure the Windows Firewall on the target machine to allow the winrm service to be contacted via HTTP on port TCP 5985 by running the following command (This is very important also)

netsh firewall add portopening TCP 5985 "Vista Collector HTTP"

To check if Firewall is running ,use this command

Netsh advfirewall firewall show rule name=all

(If the firewall is running ,It will show a long list of rules) .If not an error message will appear “An error occurred while attempting to contact the Windows Firewall Service”

Note that the above command may not be required if you have the relevant Windows Firewall turned off, configure as required for your environment.

Now get back to Sensor configuration .

You can't use localhost under host name even if you installed the collector locally .Put the Host Name there (Only first part ,not fqdn) .

Under realm ,put domain address such as Domain.com .

Rest is fine as you configured (The Port should be 5985) .

It should work fine ,InshaAllah.

SOLUTION

Feb

2012

0 Votes 0

HEMANPR

Subhani - Thanks for a great

Subhani - Thanks for a great post

I do all those steps but I do not receive security logs on my SSIM from Windows 2008 clients

Any other idea?

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Feb

2012

0 Votes 0

Avkash K

have you checked with your

have you checked with your local forewall settings for winrm serivce port???

Regards,

Avkash K

Mar

2012

0 Votes 0

HEMANPR

After some days running, I

After some days running, I saw the Security logs on SSIM Servers from Windows 2008 Clients. The changes provide by Sushani appear to fix this issue.

Thanks to EveryOnes for all your help and Time.

I use the following Symantec Products: Veritas Netbackup 7.1 On Windows Server 2003 SP2 Symantec EndPoint 12.1.100.157 RU1 On Windows Server 2003 SP2

Security Logs Not Sended to SSIM

Comments

Would you like to reply?

Links

Technical Support

Symantec.com

Store

Community Stats