[Check_mk (english)] Check_MK Windows Agent crashes (1.5.0p21 to 1.6.0p5) -> [ERROR:CRITICAL] Exception bad allocation in logwatch

Andreas Döhler andreas.doehler at gmail.com
Mon Oct 21 21:05:31 CEST 2019


Hi Constantin,

I think the system has no direct WMI problem but the agent is not
configured the right way.
It is important to disable the not needed/used section like Exchange, Skype
and Openhardwaremonitor.

One question from my side. Has the agent the same problem if you disable
the security event log?

best regards
Andreas

Am Mo., 21. Okt. 2019 um 14:10 Uhr schrieb Thomas Wittmann <
tom.teel at gmail.com>:

> Hi Constantin
> seems your queried systems might have an issue with WMI queries timing out.
> Maybe an increase of timeout setting for Windows agent might help
>
> BR Thomas
>
> Am Mo., 21. Okt. 2019 um 14:04 Uhr schrieb Lotz, Constantin via checkmk-en
> <checkmk-en at lists.mathias-kettner.de>:
>
>> Hi there,
>>
>>
>>
>> i have a few systems where the agent is crashing after a couple of
>> minutes with the message: 2019-10-20 05:02:42.787 [ERROR:CRITICAL]
>> Exception bad allocation in logwatch
>>
>> We have some eventlogs (security for example) which are configured with
>> 4GB size. When the agent is executed we see that it is memory consuming
>> 1GB+ and some cpu and then crashing some minutes ago.
>>
>>
>>
>> 2019-10-20 04:58:10.745 [Err  ] Timeout [3] seconds broken  when query WMI
>>
>> 2019-10-20 04:58:10.746 [Warn ] Object
>> 'Win32_PerfRawData_MSExchangeISStore_MSExchangeISStore' in 3002ms sends NO
>> DATA
>>
>> 2019-10-20 04:58:10.746 [Warn ] On timeout in sub section
>> 'msexch_isstore' try reuse cache
>>
>> 2019-10-20 04:58:10.746 [Trace] cma::provider::WmiCachedDataHelper:  no
>> data to provide, cache is also empty
>>
>> 2019-10-20 04:58:13.749 [Err  ] Timeout [3] seconds broken  when query WMI
>>
>> 2019-10-20 04:58:13.749 [Warn ] Object
>> 'Win32_PerfRawData_MSExchangeRpcClientAccess_MSExchangeRpcClientAccess' in
>> 3002ms sends NO DATA
>>
>> 2019-10-20 04:58:13.749 [Warn ] On timeout in sub section
>> 'msexch_rpcclientaccess' try reuse cache
>>
>> 2019-10-20 04:58:13.749 [Trace] cma::provider::WmiCachedDataHelper:  no
>> data to provide, cache is also empty
>>
>> 2019-10-20 04:58:13.750 [Warn ] Section 'msexch' cannot provide data
>>
>> 2019-10-20 04:58:13.750 [Trace] Sending data 'msexch' id is
>> [347141011016800] length [0]
>>
>> 2019-10-20 04:58:13.750 perf: Section 'msexch' took [21022] milliseconds
>>
>> 2019-10-20 04:58:13.766 Received [128] bytes from 'msexch'
>>
>> 2019-10-20 04:58:57.203 Connected from '172.23.188.212' ipv6 :false ->
>> queue
>>
>> 2019-10-20 04:58:57.203 Put on queue, size is [16]
>>
>> 2019-10-20 05:02:42.787 [ERROR:CRITICAL] Exception bad allocation in
>> logwatch
>>
>> 2019-10-20 05:02:42.788 [Trace] Sending data 'logwatch' id is
>> [347141011016800] length [0]
>>
>> 2019-10-20 05:02:42.788 perf: Section 'logwatch' took [290066]
>> milliseconds
>>
>> 2019-10-20 05:02:42.797 Received [128] bytes from 'logwatch'
>>
>> 2019-10-20 05:02:42.798 perf: Answer is ready in [293104] milliseconds
>>
>> 2019-10-20 05:02:42.798 Send [71837] bytes of data
>>
>> 2019-10-20 05:02:42.798 Found connection on queue, in queue left[15]
>>
>> 2019-10-20 05:02:42.799 Connected from '172.23.188.212' ipv6:false <-
>> queue
>>
>> 2019-10-20 05:02:42.799 [Warn ] OHM file
>> 'C:\ProgramData\checkmk\agent\bin\OpenHardwareMonitorCLI.exe' is not found
>>
>> 2019-10-20 05:02:42.800 Allowed Extensions: [exe,bat,vbs,cmd,ps1]
>>
>> 2019-10-20 05:02:42.800 [Trace] Left [40] files to execute
>>
>>
>>
>> Any thoughts of this?
>>
>>
>>
>> Kind regards,
>>
>> Constantin
>> _______________________________________________
>> checkmk-en mailing list
>> checkmk-en at lists.mathias-kettner.de
>> Manage your subscription or unsubscribe
>> https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en
>
> _______________________________________________
> checkmk-en mailing list
> checkmk-en at lists.mathias-kettner.de
> Manage your subscription or unsubscribe
> https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.mathias-kettner.de/pipermail/checkmk-en/attachments/20191021/b9130442/attachment.html>


More information about the checkmk-en mailing list