I have been created several metering rules for observing the winword.exe and
excel.exe also. I have been created three metering rule for each .exe file
so as to not missing any version of monitoring. It includes english, chinese
traditional (HK) and chinese traditional (taiwan)
Although i have seen that it has been scan the WINWORD.exe in the
mtrmgr.log, it say that "No matching rule found for process xxx".
i have make sure that the SMS_SQL_MONITOR component is running and also it
shows the status message of FileUsageSumamry and MachineUsageSummary tasks
that is running also.
Please advise. Thanks very much.
Below is the log of the mtrmgr.log and the SWMTRReportGen.log at the client
side.
Client Platform : Windows 2000 Professional (Chinese - Traditional)
Office 2003 (Chinese Traditional)
mtrmgr.log
<![LOG[Creation event received for process
968]LOG]!><time="02:42:57.576+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:245">
<![LOG[Process ID 968 is for process
C:\WINNT\System32\CCM\SMSCliUI.exe]LOG]!><time="02:42:57.685+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1068"
file="processdata.cpp:124">
<![LOG[No matching rule found for process 968]LOG]!><time="02:42:57.685+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1112"
file="activeprocesses.cpp:64">
<![LOG[Termination event received for process
968]LOG]!><time="02:43:03.669+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:275">
<![LOG[Creation event received for process
1004]LOG]!><time="02:44:38.763+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:245">
<![LOG[Process ID 1004 is for process
C:\WINNT\system32\NOTEPAD.EXE]LOG]!><time="02:44:38.873+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1068"
file="processdata.cpp:124">
<![LOG[No matching rule found for process
1004]LOG]!><time="02:44:38.888+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1112" file="activeprocesses.cpp:64">
<![LOG[Termination event received for process
1004]LOG]!><time="02:45:00.998+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:275">
<![LOG[Creation event received for process
896]LOG]!><time="02:50:06.998+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:245">
<![LOG[Process ID 896 is for process
C:\WINNT\system32\NOTEPAD.EXE]LOG]!><time="02:50:07.107+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1068"
file="processdata.cpp:124">
<![LOG[No matching rule found for process 896]LOG]!><time="02:50:07.123+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1112"
file="activeprocesses.cpp:64">
<![LOG[Termination event received for process
896]LOG]!><time="02:50:12.529+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:275">
<![LOG[Creation event received for process
1268]LOG]!><time="02:50:15.060+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:245">
<![LOG[Process ID 1268 is for process
C:\WINNT\system32\NOTEPAD.EXE]LOG]!><time="02:50:15.169+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1068"
file="processdata.cpp:124">
<![LOG[No matching rule found for process
1268]LOG]!><time="02:50:15.169+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1112" file="activeprocesses.cpp:64">
<![LOG[Termination event received for process
1268]LOG]!><time="02:50:19.935+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:275">
<![LOG[Creation event received for process
1160]LOG]!><time="02:50:21.841+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:245">
<![LOG[Process ID 1160 is for process
C:\WINNT\system32\NOTEPAD.EXE]LOG]!><time="02:50:21.951+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1068"
file="processdata.cpp:124">
<![LOG[No matching rule found for process
1160]LOG]!><time="02:50:21.966+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1112" file="activeprocesses.cpp:64">
<![LOG[Termination event received for process
1160]LOG]!><time="02:50:29.826+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:275">
<![LOG[Termination event received for process
528]LOG]!><time="02:50:33.013+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:275">
<![LOG[Termination event received for process
1276]LOG]!><time="02:50:35.701+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:275">
<![LOG[Creation event received for process
928]LOG]!><time="02:50:40.623+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:245">
<![LOG[Process ID 928 is for process C:\Program Files\Microsoft
Office\OFFICE11\WINWORD.EXE]LOG]!><time="02:50:40.732+000" date="03-06-2004"
component="mtrmgr" context="" type="1" thread="1068"
file="processdata.cpp:124">
<![LOG[No matching rule found for process 928]LOG]!><time="02:50:40.732+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1112"
file="activeprocesses.cpp:64">
<![LOG[Creation event received for process
528]LOG]!><time="02:50:45.794+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:245">
<![LOG[Process ID 528 is for process
C:\WINNT\system32\NOTEPAD.EXE]LOG]!><time="02:50:45.935+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1068"
file="processdata.cpp:124">
<![LOG[No matching rule found for process 528]LOG]!><time="02:50:45.935+000"
date="03-06-2004" component="mtrmgr" context="" type="1" thread="1112"
file="activeprocesses.cpp:64">
<![LOG[Termination event received for process
528]LOG]!><time="02:52:36.107+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:275">
<![LOG[Creation event received for process
908]LOG]!><time="02:52:38.888+000" date="03-06-2004" component="mtrmgr"
context="" type="1" thread="1068" file="swmtrmanager.cpp:245">
SWMTRReportGen.log
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="00:12:43.808+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="988"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="00:12:43.886+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="988"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="00:15:00.558+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="1036"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="00:15:00.573+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="1036"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="00:30:00.339+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="476"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="00:30:00.354+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="476"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="00:45:00.401+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="1136"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="00:45:00.433+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="1136"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="01:00:00.047+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="824"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="01:00:00.062+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="824"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="01:15:00.371+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="512"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="01:15:00.371+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="512"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="01:30:00.288+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="324"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="01:30:00.304+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="324"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="01:45:00.310+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="464"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="01:45:00.326+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="464"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="02:00:00.326+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="320"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="02:00:00.341+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="320"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="02:15:00.388+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="944"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="02:15:00.404+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="944"
file="swmtrreport.cpp:59">
<![LOG[CSWMtrReportEndpoint::HandleMessage- Report Endpoint
invoked. ]LOG]!><time="02:30:00.357+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="1" thread="460"
file="swmtrreportendpoint.cpp:67">
<![LOG[No usage data found to generate software metering
report]LOG]!><time="02:30:00.357+000" date="03-06-2004"
component="SWMTRReportGen" context="" type="2" thread="460"
file="swmtrreport.cpp:59">
Post by Sangeetha Visweswaran [MSFT]Are you sure that summarization has run? Check the status messages for the
SMS_SQL_MONITOR component , it should have status messages if
FileUsageSumamry and MachineUsageSummary tasks have run. Also check the
FileUsageSummary and MachineUsageSummary tables in SQL to see if they have
data.
To check if the clients have sent the data up, check the mtrmgr.log and
SWMTRReportGen.log on the Advanced client. The first one is the log that has
entries when an executable matches a rule, when a rule is downloaded or when
a rule is deleted/modified. The second log has entries when the usage report
is sent up to the MP
On the siteserver . of course you look at swmproc.log to see if usage data
is cming up , and also check the MeterData table in SQL to see if hte data
from the client is present there.
By default, summarization summarizes data that is 12 hours older than the
time of summarization.
--
Hope this helps!
Sangee
P.S:Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
"This posting is provided AS IS with no warranties and confers no rights."
This posting is provided AS IS with no warranties and confers no rights.
Post by MurphyI have been setting up a testing environment for SMS 2003.
Now i am testing the Software metering feature. I have been enabled all
the agents both at the server side and the client side. I have been
configured the "software inventory client agents" to collect .exe files and
also recofigured the schedule to run every 10 mins. Besides this, i have
also recofigured the "software metering client agents" to schedule every 15
mins to collect the date and download the metering rules. And also i have
been enabled the "summarize software metering file usage data everyday start
from 12:00 AM to 5:00AM.
Post by MurphyMoreover, i have added the metering rules so as to monitor the
outlook.exe, winword.exe and excel.exe. After a day, i try to run the
reports to query the results. It seems doesn't work. The report shows that
no one has been using the specific .exe. I have been checked the swmproc.log
and below is the result. it is because the log size is too large so i just
captured some of it.
Post by MurphyHave i miss some prodcure on setting up the software metering so the
management point can't receive the file so as to update the database??
Post by MurphyHow can i make sure that the file can be uploaded to the site system?? any
log that i can check??
Post by MurphyIs it really i need to wait for 12 hours for the result generated??
SCF file change detected. SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:05
PM 2676 (0x0A74)
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:15 PM 2676 (0x0A74)
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:15 PM 2676 (0x0A74)
Post by MurphyParent Site Code SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:15 PM
2676 (0x0A74)
Post by MurphyMinimum Clean Up Age: 168 hours
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:15 PM 2676 (0x0A74)
Post by MurphyIntegration Threads: 2
SMS_SOFTWARE_METERING_PROCESSOR
Post by Sangeetha Visweswaran [MSFT]3/5/2004 3:00:15 PM 2676 (0x0A74)
Post by MurphyNew Usage Thread File Count Threshold: 50
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:15 PM 2676 (0x0A74)
Post by MurphyINBOX Polling Interval: 3600 seconds
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:15 PM 2676 (0x0A74)
Post by MurphyCAP Polling Interval: 60 minutes
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:15 PM 2676 (0x0A74)
Post by MurphyIntegration Batch Size: 25
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:15 PM 2676 (0x0A74)
Post by MurphyMaximum Retries: 3
SMS_SOFTWARE_METERING_PROCESSOR
Post by Sangeetha Visweswaran [MSFT]3/5/2004 3:00:15 PM 2676 (0x0A74)
Post by MurphyRetry Interval: 1440 minutes
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphyMaximim Process Queue Size: 2048
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphyMinimum Process Queue Size: 1024
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphySummary Replication Interval: 24 hours
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphyRule Replication Priority 0
SMS_SOFTWARE_METERING_PROCESSOR
Post by Sangeetha Visweswaran [MSFT]3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphyRule Resync Cycle 7 days
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphyMoving up to 2048 usage data files to the processing queue.
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphyMoved 0 .MUX files from the inbox to the processing queue.
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphyMoved 0 .MUV files from the inbox to the processing queue.
SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)
Post by MurphyMain thread waiting for file change notification or timeout after 60
minutes. SMS_SOFTWARE_METERING_PROCESSOR 3/5/2004 3:00:16 PM 2676 (0x0A74)