A team member sought help in creating a trigger for a specific windows event (with event ID 4725), which they wanted to log for future review. Other members pointed out that the event information needed to be at an audit failed level and also needed to be a supported event log. A link to support documentation was provided for reference. No further workaround was suggested.
Read the entire article here...
Microsoft Windows Related Training & Support Archives
Microsoft Windows training and support-related archives from inside the ControlUp Community on Slack.
ControlUp Logs and Syslog Functionality for Edge DX Users.
A user asked about Syslog functionality for ControlUp logs on their SIEM tool, as they are exclusive users of Edge DX. Another user suggested using API's to extract logs, and mentioned the use of a cloud-hosted Splunk. They also discussed Windows event logs on endpoints, with event IDs for remote control/shadow and shell sessions. Mac logs are kept separately, and can be accessed through a specific command. An event staffer confirmed the information.
Read the entire article here...
Read the entire article here...
Creating ControlUp Triggers for Process Crashes in Windows 10 VM
Users discussed creating triggers for detecting a process crash in a Windows 10 VM. The ideal event ID for this is 1000, with 1002 being used for a hang. Invoke-cuquery can be used to pull crash events from the last hour. Edge uses 1000 and 1001, with 1001 being used for something else. Insertionstrings can be used for other fun stuff.
Read the entire article here...
Read the entire article here...
ControlUp Community Radio #6 – Day 1 with Simon Townsend, ControlUp Field CTO
Join us in this exciting episode of ControlUp Community Radio, where our host, Douglas Brown, talks with Simon Townsend, the newly appointed Field CTO of ControlUp.
Read the entire article here...
Read the entire article here...
Gather Drive Type Information with ControlUp Edge DX
This discussion focused on how to use Edge DX to get drive type (SSD, HDD) information into Edge DX in multiple ways. The user initially wanted to see if the laptops they were using had SSDs or HDDs to troubleshoot a performance issue, and instructions were provided for manually and semi-automatically collecting the data. Edge DX also enables the user to create custom reports and set up persistent data collection, and includes a script to collect CPU temperature. The ControlUp Scripting Guide can be found at https://support.controlup.com/docs/scripting-guide.
Read the entire article here...
Read the entire article here...
What Are the Requirements for ControlUp Scoutbees Custom Hives?
A user asked the system requirements for ControlUp Scoutbees Custom Hives. The answer is that almost any Windows machine is capable, and the official specifications can be found at the links https://support.controlup.com/docs/custom-hive-overview and https://support.controlup.com/docs/installing-custom-hives as the hives do not cause any load.
Read the entire article here...
Read the entire article here...
Investigating an Error Code in Citrix Broker Service Metric
A discussion was held to determine if an error code meant there was an issue, and it was concluded to reach out to support as the error was likely due to the lack of a metric from the Citrix Broker Service category in the Windows Standard Performance Monitor.
Read the entire article here...
Read the entire article here...
Leveraging ControlUp Triggers to Restart Services After VM Boot Up
A user asked about using ControlUp Triggers to restart a service after a VM boot up. Options discussed include Uptime in Minutes and Status column triggers, but it may be best to use a Scheduled Task in the VM. Advice was given to be careful with the equals operator, as it is risky for numeric values like uptime. A further suggestion was to use BIS-F with a custom script looping until the service is started.
Read the entire article here...
Read the entire article here...
Where to Place the ControlUp Agent in Citrix App Layering
A user asked what the preferred place is to put the ControlUp agent in Citrix App Layering. It can be put in the base layer (the OS layer) or the Platform Layer. It can be put in an App Layer as well, but there have been customers with issues, so it's best to try it and check to see if it works and if all metrics are working. A user replied that they have the ControlUp agent in an App Layer with no issues.
Read the entire article here...
Read the entire article here...
Setting Up ControlUp Event Log Triggers for AppLocker Logs
A user asked for help setting up an event log trigger for AppLocker log under Windows. After being directed to a Powershell command to check if AppLocker is a supported event log, it was confirmed that it is not currently supported but there is work going on to improve this.
Read the entire article here...
Read the entire article here...