Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

How do both rules work, and can we combine both rules? First, you can't combine both rules. Both rules are standalone rules.

Table of Contents

Enabled section for Windows

By default, all the sections will be executed. Sections that are not selected here will be skipped. Skipping sections reduces CPU load on the monitored host and the amount of transferred data. However, it may result in the absence of the associated Checkmk service or services. The most CPU performance is needed by the Eventlog monitoring and the performance counters need the most CPU performance.

Disabled section for Windows

This option allows skipping specific sections of the Checkmk agent. By default, all the sections will be executed. Selected sections The agent will not be executed by the agentexecute selected sections. Skipping sections reduces CPU load on the monitored host and the amount of transferred data. However, it may result in the absence of the associated Checkmk service or services.

How should we use the rules?

Note

We recommend using only one of these rules. With the "enabled" rule, you can define a set of sections that should be enabled by the agent directly. In such a case you want to disable a section, e.g., Windows counter, due to long-running WMI commandccommands, you should use the disabled rule, or you deselect this entry in the enabled rule.

...

  1. Rule (top rule)
    1. This rule, without selecting any section, is enables the rule for enabling the Windows Event Log on specific systems.

  2. Rule (the very last rule, if you have more rules)
    1. Here you select only the Windows Event Logs. This is your default rule to disable the Log Section globally.



Filter by label (Content by label)
showLabelsfalse
max5
spacesKB
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ("bakery","windows") and type = "page" and space = "KB"
labelswindows bakery

...