ChipPC - Xcalibur W Wiki

For Server 2.12.x & Agent 2.12.x

User Tools

Site Tools


Getting Started

Server Software Installation

Client Software Installation

First Time Use

Enrolling Client Devices

Client Access Licenses

Discovering New Clients

Enrolling Client Devices

Manage Devices

Commands Glossary

Commands to Multiple Devices

Commands to Single Device


Reporting Services

Monitoring and Preventive Maintenance

Automatic Policies


Manager Options




====== Rules Examples ====== ---- **Xcalibur W** enables a wide variety of device monitoring scenarios. Several examples are shown below. |{{:tip.png |}} Monitoring Rules are intended to **anticipate failures** and to ensure remote devices remain in the desired state. For successful implementation, take time to understand the triggers and rules that make sense in a particular context.| {{:monitoring_and_preventive_maintenance:monitoring_rules_examples1.png?900|}} **Hardware : Motherboard Device Temperature** //Ensure the system does not exceed the desired temperature range// Trigger : sys.temperature Operator : > Value : 40°C Parameters : - **Operating System : File Size** //Monitor the size of the Windows virtual memory paging file// Trigger : file.size Operator : > Value : 2 Gb Parameters : c:\pagefile.sys **Operating System : Check Antivirus Status** //Verify whether the Antivirus software is loaded// Trigger : sys.gen.result Operator : contains Value : antivirus Parameters : wmic /namespace:\\root\SecurityCenter2 path AntiVirusProduct get /value **Operating System : Registry key change** //Monitor the Windows shell using registry key// Trigger : sys.reg.value Operator : = Invert: Yes Value : explorer.exe Parameters : "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell" **Operating System : Check network connectivity** //Report packet losses when pinging a server// Trigger : sys.gen.result Operator : Contains Invert: Yes Value : 0% Loss Parameters : ping ** Operating System : Check application freeze** //Verify whether Internet Explorer is responding properly// Trigger : sys.gen.result Operator : Contains Value : iexplorer Parameters : powershell.exe -executionpolicy bypass "Get-Process | Where-Object { $_.responding -eq $false}" ** Operating System : Service is down ** //Audit the status of the Windows Audio service// Trigger : sys.serv.started Operator : = Value : False Parameters : Windows Audio

monitoring_and_preventive_maintenance/monitoring_rules_examples.txt · Last modified: 2021/07/29 13:11 (external edit)