upstream/icinga-powershell-framework
1
0
Fork 0
mirror of https://github.com/Icinga/icinga-powershell-framework.git synced 2025-12-20 23:00:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Adds PerfLib error IWKB

Browse source
This commit is contained in:
Lord Hepipud 2021-06-02 12:28:36 +02:00
parent 72194a1f6d
commit 4d415e555d
3 changed files with 28 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
doc/10-Knowledge-Base.md
View file

@ -15,3 +15,4 @@ For this reason you will find a list of Icinga knowledge base entries below. Ent
| [IWKB000005](knowledgebase/IWKB000005.md) | powershell.exe : Failed to start service 'Icinga PowerShell Service (icingapowershell)'. |
| [IWKB000006](knowledgebase/IWKB000006.md) | The user you are running this command as does not have permission to access the Windows Update ComObject "Microsoft.Update.Session". |
| [IWKB000007](knowledgebase/IWKB000007.md) | Icinga Director Self-Service API fails with errors. [Error]: The remote host for address "..." could not be resolved [Error]: Failed to connect to your Icinga Director at "...". Please try again. |
| [IWKB000008](knowledgebase/IWKB000008.md) | The EventLog contains many `Perflib`, `PerfNet` and `PerfProc` errors/warnings with EventId `1008`, `2002` and `2004` |

BIN
doc/images/04_knowledgebase/IWKB000008/01_EventLog_Error.png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 6.9 KiB

27
doc/knowledgebase/IWKB000008.md Normal file
View file

@ -0,0 +1,27 @@
# Icinga Knowledge Base - IWKB000008
## Short Message
The EventLog contains many `Perflib`, `PerfNet` and `PerfProc` errors/warnings with EventId `1008`, `2002` and `2004`
## Example Exception
![EventLog PerfLib](../images/04_knowledgebase/IWKB000008/01_EventLog_Error.png)
## Reason
We are using an internal .NET Class to create Performance Counter objects, as this allows us to use the englisch naming for `Processor` for example, instead of many different localization for categories or counter names.
By doing so, we ensure that Icinga for Windows can be used on any Windows machine, regardless of language settings.
The issue on this method is, that even while we only load the `Processor` Performance Category for example, the method will try to initialise all Performance Counter categories available on the system. Regular users, including the `NetworkService`, do not have enough permissions to access the `WmiApRpl` for example, resulting in aboves error message. Running the plugins as `Administrator` or in `System` context is not causing issues, as the required permissions to access these objects are available.
## Solution
At the moment there is no solution available to resolve this issue. Permissions to these counters cannot be granted. Disabling these Performance Counter endpoints is not suitable as well, because it might break different applications and it is also **not** adviced to run the Icinga Agent or checks in `LocalSystem` context for security reasons.
Right now a workaround would be the experimental feature [Forward Checks to Internal API](..\experimental\01-Forward-checks-to-internal-API.md), which is not yet ready for production.
As Performance Counter libraries are loaded during startup, they will only occur once you start the Icinga for Windows service with this daemon. Every single check executed afterwards will use Performance Counter libraries, but the current shell session has already loaded required components and therefor only access objects we want.
As a result, no additional errors or warnings are added to the EventLog.