|
Site Admin |
|
Joined: Mon Jun 07, 2004 11:48 am Posts: 1964 Location: Brisbane, Australia
|
Everything JPA said is 100% correct. [quote="spichelman"]when I choose Failed Audits from the Reports menu - no results are returned. This is a good thing. It means audits are processing correctly. [quote="spichelman"]I am looking at the sys_man_audits table in the OAv2 DB to see why there "mostly" not any data in the "audit_wmi_fails" column/field? Any data here is sent by the audit_windows script. It simply means the audit_windows script did not get any info for those WMI calls. In the case of Win32_USBDevice, this is a WMI component that is only installed if you have the Microsoft SMS/System Center client installed. In the case of W3SVC, either IIS is not installed on the machine in question, or it failed querying IIS for some reason. You would need to dump some variables from the audit_script to chase that down. I'll have to leave that as an excersize for someone else though.[quote="spichelman"]I am trying to figure out what to look for in this table to determine a failed/missing audit of a machine? This table will not provide that data. JPAs post details where to look for a submitted, but failed audit. As for finding a failed audit_windows script - not much hope there. The machine will obviously NOT be in the Open-AudIT database. Personally, I would export the "All Windows" group to an Excel file, then query Active Directory (assuming you are running AD), for a list of machine names. Put that list into Excel and compare the two lists to determine which PCs are missing. I may code something for Open-AudIT to query Active Directly directly, but I'm swamped at the moment with other features. Consider that feature "on the list"...
_________________ Support and Development hours available from [url=https://opmantek.com]Opmantek[/url]. Please consider a purchase to help make Open-AudIT better for everyone.
|
|