Ad Widget

Collapse

Excluding certain windows services

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • robertdonovan
    Junior Member
    • Jan 2019
    • 5

    #1

    Excluding certain windows services

    Hello all,
    Just installed Zabbix today (4.0) and trying to fine tune a few things before I go all in. We have a bank of Server 2016 Terminal servers that the majority of our users work off of. There is one service on each TS server that generates a new version of its name each time it is started.

    Service "OneSyncSvc_527e211" (Sync Host_527e211) is not running (startup type automatic delayed)

    The characters after OneSyncSvc_ change each time. I've edited the regular expression at Administration > General > Regular expression > Windows service names for discovery

    Result is False - ^(TrustedInstaller|OneSyncSvc_|BITS|MMCSS|gupdate| SysmonLog|clr_optimization_v2.0.50727_32|clr_optim ization_v4.0.30319_32)$

    Yet here I am with multiple instances of the service showing up for each of the TS servers.

    When I go to the test and run it, it shows True

    I'm full on noob here and have done some searching and have followed the minimal instruction I've found but still can't get it to work. Can anyone help? Do I need to edit the expression? Is there something I have to do to "kick it off" so it starts working?

    Thanks ahead of time.
  • Engraf
    Member
    • Sep 2014
    • 41

    #2
    Your pattern searches for the whole string "OneSyncSvc_" because of ^ and $ operators. Try to use
    Code:
    ^(TrustedInstaller|OneSyncSvc_[COLOR=#FF0000][B].*[/B][/COLOR]|BITS|MMCSS|gupdate| SysmonLog|clr_optimization_v2.0.50727_32|clr_optim ization_v4.0.30319_32)$

    Comment

    • robertdonovan
      Junior Member
      • Jan 2019
      • 5

      #3
      Thanks. I'll give that a try. How long after the change should I expect to see those services falling off the monitor?

      Comment


      • Engraf
        Engraf commented
        Editing a comment
        I don't sure, but It seems that this does not affect the already discovered items. So you need to delete them manually.
    • robertdonovan
      Junior Member
      • Jan 2019
      • 5

      #4
      Ok thanks again.

      Comment

      • robertdonovan
        Junior Member
        • Jan 2019
        • 5

        #5
        Seems to be working. I had to remove each of the previous instances. Going to restart all the TSs tonight and see if things are good in the morning when everyone logs back in. Thanks for the help.

        Comment

        • nileshkahar
          Junior Member
          • Mar 2019
          • 4

          #6
          Can someone please point me what wrong I am doing here?
          ================================================== ===============
          ^(TrustedInstaller|OneSyncSvc_.*|BITS|MMCSS|gupdat e|SysmonLog|clr_optimization_v2.0.50727_32|clr_opt imization_v4.0.30319_32|sppsvc|WbioSrvc|RemoteRegi stry|MapsBroker|WpnUserService_.*|CDPUserSvc_.*|ti ledatamodelsvc|CDPSvc)$
          ================================================== ===============
          Above expression is somehow not working for me.

          Comment

          • Wolvverine
            Junior Member
            • Sep 2019
            • 6

            #7
            Look here:

            Comment

            Working...