| Author |
Message |
michelk
Guest
|
 Posted:
Mon Dec 27, 2004 4:10 pm Post subject:
advanced question [totally loosely coupled system monitoring |
|
|
Hi,
I'm researching if the following scenario is possible:
I'm having MOM agents installed on server A. And have the MOM D/CAM server
installed on Server B.
Now I want to send the (mom internally)events from server A to server B
trough SMTP. So NOT with the normal dcom protocol. So I'm looking for a sort
of event forwarder(proxy) via SMTP ???
The reason for this is that I want totally loosely coupled system
monitoring. This systems (server A) do not have to interact with Server B.
Only send the events and forget it...
Is this possible , out off the box or with own coding. ?????
thanks.
michel |
|
| Back to top |
|
 |
Arie de Haan
Guest
|
| Posted:
Tue Dec 28, 2004 7:58 pm Post subject:
Re: advanced question [totally loosely coupled system monito |
|
|
In article <eiGaZx$6EHA.3504@TK2MSFTNGP12.phx.gbl>,
michel_replace_this_with_a_@_infosupport.com says...
| Quote: | Hi,
I'm researching if the following scenario is possible:
I'm having MOM agents installed on server A. And have the MOM D/CAM server
installed on Server B.
Now I want to send the (mom internally)events from server A to server B
trough SMTP. So NOT with the normal dcom protocol. So I'm looking for a sort
of event forwarder(proxy) via SMTP ???
The reason for this is that I want totally loosely coupled system
monitoring. This systems (server A) do not have to interact with Server B.
Only send the events and forget it...
Is this possible , out off the box or with own coding. ?????
thanks.
michel
|
If you only want events from the eventlogs forwarded, you might look at
this.
http://msdn.microsoft.com/library/default.asp?url=/library/en-
us/wmisdk/wmi/wmi_tasks__event_logs.asp
Personally i think you loose a lot of functionality on having a
'loosly' coupled system. All the management pack functionality is 'lost'
dont forget that mom 2005 doesn't need dcom, it reports its events via
tcp port 1270.
so maybe if you explai why you want it like this, that someone is able
to tell you how to do it with std. installed mom.
--
Greetz,
Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc. |
|
| Back to top |
|
|
michelk
Guest
|
| Posted:
Fri Dec 31, 2004 8:58 pm Post subject:
Re: advanced question [totally loosely coupled system monito |
|
|
Arie,
Thanks for your reply. I have already have setup an monitoring system with
WMI. Have writen a provider and consumer to extract information events from
the server and send it in an XML file to a main monitor server that is
generating alarm or reports on it. The main reason for my question is that
we want to replace this system to MOM 2005 with almost full use of the
management packs BUT not permanent connected to the D\CAM server.
I want to see if the mom agents can send the events to the D/CAM by email.
Only then we can give it a try. A lott of our (to monitor) servers can only
do outbound SMTP.
Is it possible to move/copy the mom agent queue buffer files to the D/CAM
server in order to process them ?
Or is there an WMI provider that can get the internal MOM agent events ?
michel
"Arie de Haan" <com.pandinus@ariedh.reversed> wrote in message
news:MPG.1c3b84d9ee2e16489897d2@207.46.248.16...
| Quote: | In article <eiGaZx$6EHA.3504@TK2MSFTNGP12.phx.gbl>,
michel_replace_this_with_a_@_infosupport.com says...
Hi,
I'm researching if the following scenario is possible:
I'm having MOM agents installed on server A. And have the MOM D/CAM
server
installed on Server B.
Now I want to send the (mom internally)events from server A to server B
trough SMTP. So NOT with the normal dcom protocol. So I'm looking for a
sort
of event forwarder(proxy) via SMTP ???
The reason for this is that I want totally loosely coupled system
monitoring. This systems (server A) do not have to interact with Server
B.
Only send the events and forget it...
Is this possible , out off the box or with own coding. ?????
thanks.
michel
If you only want events from the eventlogs forwarded, you might look at
this.
http://msdn.microsoft.com/library/default.asp?url=/library/en-
us/wmisdk/wmi/wmi_tasks__event_logs.asp
Personally i think you loose a lot of functionality on having a
'loosly' coupled system. All the management pack functionality is 'lost'
dont forget that mom 2005 doesn't need dcom, it reports its events via
tcp port 1270.
so maybe if you explai why you want it like this, that someone is able
to tell you how to do it with std. installed mom.
--
Greetz,
Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc.
|
|
|
| Back to top |
|
|
Arie de Haan
Guest
|
| Posted:
Wed Jan 05, 2005 3:09 am Post subject:
Re: advanced question [totally loosely coupled system monito |
|
|
<snip>
| Quote: | I want to see if the mom agents can send the events to the D/CAM by email.
Only then we can give it a try. A lott of our (to monitor) servers can only
do outbound SMTP.
/snip |
Only thing i can think of is putting the agent communication on port 25.
And set a large buffer property on the agent, so it can buffer events
when not in contact with the management server
--
Greetz,
Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc. |
|
| Back to top |
|
|
michelk
Guest
|
| Posted:
Mon Jan 10, 2005 8:38 pm Post subject:
Re: advanced question [totally loosely coupled system monito |
|
|
Ari,
I don't think that the SMTP service understands the data that the agent is
sending. ;-)
I was looking more to a forwarding agent . Or a connector bases solution.
But thanks anyway for the reactions.
michel
"Arie de Haan" <com.pandinus@ariedh.reversed> wrote in message
news:MPG.1c45245fa5c124f79897db@207.46.248.16...
| Quote: | snip
I want to see if the mom agents can send the events to the D/CAM by
email.
Only then we can give it a try. A lott of our (to monitor) servers can
only
do outbound SMTP.
/snip
Only thing i can think of is putting the agent communication on port 25.
And set a large buffer property on the agent, so it can buffer events
when not in contact with the management server
--
Greetz,
Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc.
|
|
|
| Back to top |
|
|
Arie de Haan
Guest
|
| Posted:
Tue Jan 11, 2005 6:02 am Post subject:
Re: advanced question [totally loosely coupled system monito |
|
|
In article <ewku$Hy9EHA.1404@TK2MSFTNGP11.phx.gbl>,
michel_replace_this_with_a_@_infosupport.com says...
| Quote: |
Ari,
I don't think that the SMTP service understands the data that the agent is
sending. ;-)
lol, well you could write an event sink on the exchange server which |
picks it up and then resubmits it to MOM. I would use the unencrypted
port for this ;)
But there is no way to have the firewall admin open up port 1270?
--
Greetz,
Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc. |
|
| Back to top |
|
|
michelk
Guest
|
| Posted:
Tue Jan 11, 2005 2:15 pm Post subject:
Re: advanced question [totally loosely coupled system monito |
|
|
I'm don't know a lot of exchange. But Event sinks can't (re)act to an SMTP
25 port. In this case the message must be standing in the mail store before
any event can be launched. So this event sink answer is only preventing
polling.
Yes of course we could open port 1270 but the companies we are monitoring
have own security roles and so many of them don't want do this. The only way
(I know it sounds strange) is SMTP.
michel
"Arie de Haan" <com.pandinus@ariedh.reversed> wrote in message
news:MPG.1c4d3617eec31fc69897ec@207.46.248.16...
| Quote: | In article <ewku$Hy9EHA.1404@TK2MSFTNGP11.phx.gbl>,
michel_replace_this_with_a_@_infosupport.com says...
Ari,
I don't think that the SMTP service understands the data that the agent
is
sending. ;-)
lol, well you could write an event sink on the exchange server which
picks it up and then resubmits it to MOM. I would use the unencrypted
port for this ;)
But there is no way to have the firewall admin open up port 1270?
--
Greetz,
Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc.
|
|
|
| Back to top |
|
|
Arie de Haan
Guest
|
| Posted:
Tue Jan 11, 2005 7:28 pm Post subject:
Re: advanced question [totally loosely coupled system monito |
|
|
Inline
In article <#rANGX79EHA.2600@TK2MSFTNGP09.phx.gbl>,
michel_replace_this_with_a_@_infosupport.com says...
| Quote: | I'm don't know a lot of exchange. But Event sinks can't (re)act to an SMTP
25 port. In this case the message must be standing in the mail store before
any event can be launched. So this event sink answer is only preventing
polling.
This was only meant as a joke, sorry if it sounded like a serious |
suggestion.
What is a serious suggestion is to have a seperate public ip-address
registered and use this one to get the agents to report to with port 25.
Forward this to your internal MOM server (mind you, i didn't test this,
it is based on paper research)
| Quote: |
Yes of course we could open port 1270 but the companies we are monitoring
have own security roles and so many of them don't want do this. The only way
(I know it sounds strange) is SMTP.
Well ok, if the companies have a statefull firewall, imho the only thing |
they have to do is configure a specific rule/path to your external ip-
addres on port 1270. So i don't see the problem, and if they allow the
monitoring data to be collected by you, why not open up a port 1270 to
you? But then again, politics can be a PITA.
anyways good luck with your effort.
| Quote: |
michel
"Arie de Haan" <com.pandinus@ariedh.reversed> wrote in message
news:MPG.1c4d3617eec31fc69897ec@207.46.248.16...
In article <ewku$Hy9EHA.1404@TK2MSFTNGP11.phx.gbl>,
michel_replace_this_with_a_@_infosupport.com says...
Ari,
I don't think that the SMTP service understands the data that the agent
is
sending. ;-)
lol, well you could write an event sink on the exchange server which
picks it up and then resubmits it to MOM. I would use the unencrypted
port for this ;)
But there is no way to have the firewall admin open up port 1270?
--
Greetz,
Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc.
|
--
Greetz,
Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc. |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in