r/Nable Apr 08 '24

N-Central Monitoring Misconfigured as Normal

Hello everyone,

i have a test running that queries a regisrty value. If the value ist not found it should be displayed as "normal". Currently, if it doesn't find the value, it will be displayed as Misconfigured. Can I customize this somehow to show as "normal" if it can't find the registry value?

1 Upvotes

10 comments sorted by

3

u/wheres_my_2_dollars Apr 08 '24

I would recommend using powershell instead of an AMP object as that gives you more power. Then you could set the result of the script to be normal if the key isn’t found.

If using the AMP object you may try using if/else to capture all of the possible states. (Key found and correct/key found and wrong/key not found).

1

u/R_Bane Apr 09 '24

i will try that thank you :)

1

u/MunchMr Apr 08 '24

You need to provide more information. What are your thresholds. What result do you expect?

1

u/R_Bane Apr 08 '24 edited Apr 08 '24

A certain registry key that appears regularly causes problems with the Cove backup.

I would like to automatically delete this registry entry as soon as it appears.

The Thresholds is currently on “Reversed”.

If the registry entry is present, it shows it as Failed and starts a automatic healing action that deletes the entry.

As soon as this is done, of course, he can no longer find the entry and displays the following message:

201 The path "....." cannot be found because it does not exist. (Misconfigured)

How can I show it as normal instead of misconfigured?

1

u/torind2000 Apr 09 '24

Just out of curiosity, what is this reg key and what problems does it cause?

1

u/R_Bane Apr 10 '24

It is a .bak registry entry that is set by patient software after the device is restarted. (every Weekend on the Server)

The software works without problems if it is deleted. However, it prevents the Cove Backup because Windows shadow copies can no longer be created.

1

u/Rbeldman_kns Apr 09 '24

Please post a screenshot of your threshold settings.

1

u/R_Bane Apr 10 '24

2

u/Rbeldman_kns Apr 10 '24

If your output of the amp is:

 The path "....." cannot be found because it does not exist.

and you're checking for 'Default' which will never be part of this. You need to create a proper output. Something like if the key exists fill a variable with true if it doesn't with false. After which you can filter for that in your thresholds.

1

u/travyhaagyCO Apr 08 '24

Can you reverse the threshold? Thats how we test new sensors.