ns6
Hi guys,
I've created a custom inventory to pull wmi info on the system log files.
The inventory works 100% on a windows xp machine, but fails on server 2003 (virtual server).
The operation completes and creates the *.nsi file but when viewing the file with nsiviewer; it shows me the tables but no information.
I made sure the "inventory" folder was empty (sometimes inventory does not populate when files in folder); I checked DEP settings and added all inventory related exe's for good measure, nothing seems to work though.
I've added the custom inventories... was wondering if anyone could run it on a server and see if they get the same results... or maybe their is something i'm overlooking?
rename "AeXInvSolnAdm5.txt" to .ini
I've also removed all the "hidden" commands just to monitor the process better.
The "Eventcode" in the query is '1053'(code i was using to query against the xp machine), I changed this to a code i knew was definitely on the server.
custom inventory:
<InventoryClasses>
<InventoryClass name='events' manufacturer='Altiris' description='' version='1.0' platform='Win32' mifClass='Altiris|MyCustomClass|1.0'>
<xml xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema">
<s:Schema id="RowsetSchema">
<s:ElementType name="row" content="eltOnly" rs:updatable="true">
<s:AttributeType name="c0" rs:name="Category" rs:number="1" rs:nullable="true" mifAttrId="1">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c1" rs:name="CategoryString" rs:number="2" rs:nullable="true" mifAttrId="2">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c2" rs:name="ComputerName" rs:number="3" rs:nullable="true" mifAttrId="3">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c3" rs:name="Data" rs:number="4" rs:nullable="true" mifAttrId="4">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c4" rs:name="EventCode" rs:number="5" rs:nullable="true" mifAttrId="5">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c5" rs:name="EventIdentifier" rs:number="6" rs:nullable="true" mifAttrId="6">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c6" rs:name="EventType" rs:number="7" rs:nullable="true" mifAttrId="7">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c7" rs:name="InsertionStrings" rs:number="8" rs:nullable="true" mifAttrId="8">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c8" rs:name="Logfile" rs:number="9" rs:nullable="true" mifAttrId="9">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c9" rs:name="Message" rs:number="10" rs:nullable="true" mifAttrId="10">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c10" rs:name="RecordNumber" rs:number="11" rs:nullable="true" mifAttrId="11">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c11" rs:name="SourceName" rs:number="12" rs:nullable="true" mifAttrId="12">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c12" rs:name="TimeGenerated" rs:number="13" rs:nullable="true" mifAttrId="13">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c13" rs:name="TimeWritten" rs:number="14" rs:nullable="true" mifAttrId="14">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c14" rs:name="Type" rs:number="15" rs:nullable="true" mifAttrId="15">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
<s:AttributeType name="c15" rs:name="User" rs:number="16" rs:nullable="true" mifAttrId="16">
<s:datatype dt:type="string" dt:maxLength="255"/>
</s:AttributeType>
</s:ElementType>
</s:Schema>
<rs:data>
<%foreach wmiobject="o" namespace="ROOT\CIMV2" wql="SELECT * FROM Win32_NTLogEvent where EventCode = '1053' and Logfile = 'Application'"%>
<z:row
c0 ="<%writexml "wmi:o.Category"%>"
c1 ="<%writexml "wmi:o.CategoryString"%>"
c2 ="<%writexml "wmi:o.ComputerName"%>"
c3 ="<%writexml "wmi:o.Data"%>"
c4 ="<%writexml "wmi:o.EventCode"%>"
c5 ="<%writexml "wmi:o.EventIdentifier"%>"
c6 ="<%writexml "wmi:o.EventType"%>"
c7 ="<%writexml "wmi:o.InsertionStrings"%>"
c8 ="<%writexml "wmi:o.Logfile"%>"
c9 ="<%writexml "wmi:o.Message"%>"
c10 ="<%writexml "wmi:o.RecordNumber"%>"
c11 ="<%writexml "wmi:o.SourceName"%>"
c12 ="<%writexml "wmi:o.TimeGenerated"%>"
c13 ="<%writexml "wmi:o.TimeWritten"%>"
c14 ="<%writexml "wmi:o.Type"%>"
c15 ="<%writexml "wmi:o.User"%>"
/>
<%next%>
</rs:data>
<%set THROTTLEEVERY="30"%>
<%set SLEEPMS="30"%>
</xml>
</InventoryClass>
</InventoryClasses>