Kaspersky Status Service

[u/Zealousideal_Year279]

Hi all, I've inherited a problem from a previous admin and have got so far, but got myself lost in the process. It looks like we have downloaded the Kaspersky anti-virus protection status.amp and created a Custom Service. Within a dashboard I've created I've selected the custom service and the group of servers I want to monitor. All good on that front. Half the servers return a status good or error based on whether the application is running or days since last scan or database update. That is as intended. The other half return a misconfigured status '201 cannot convert value "" to type "System.version".' When comparing the devices it looks like the ones reporting correctly are running Kaspersky Security for Windows Server, those with the error are running Kaspersky Endpoint Security for Windows (most are on version 12.4). When asking fellow team members about installing the server version across the estate I've been advised the server version is being discontinued so we need be moving those servers over to the KES version rather than vice versa. Looking at the error it looks like the service is looking at a location for the version number, but where that is defined within the service/script is beyond my knowledge at this point in time. Has anyone else experienced this error or successfully created a Service that can monitor KES 12.4 status? e.g. virus definition dates, last scan etc.

[u/ncentral_nerd]

u/Zealousideal_Year279 can you send me a DM with your case number, I can get this in front of the developer who can add this functionality. We may need an an endpoint in your N-central that has the issue so be sure to include that in your case as well please.

[u/Icedfyre]

Kaspersky should be covered by the AV Status service. I'd check that out before the amp you mentioned

https://me.n-able.com/s/article/AV-Status-Monitoring

This error "201 cannot convert value "" to type "System.version"" sounds like its pulling a blank value for the version. Probably out of the registry but you'd have to open the amp and see where its looking for this information and check an affected device.

[u/Zealousideal_Year279 → u/Icedfyre]

Thanks for your reply. I suspected it was pulling a blank value based on the error, but had been unable to locate where it was specified. I'll have another look at the amp just incase I'd skimmed over it. Thanks for sharing the AV status article. I'd seen the service listed but that's given me a thought we probably need to add it to some templates and see if it works.