MARS bombs old (NT4) servers

Unanswered Question
Nov 16th, 2007
User Badges:

anyone ever experience this - MARS doing a log pull from an NT 4 server - NT4 box reboots itself repeatedly until MARS is stopped. Same thing on 3 other NT4 machines. What could it be about the MARS log pull (RPC call?) that hammers NT?

Yes - NT4 (ahhhghhhh) - but need to support these into near future.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
pmccubbin Fri, 11/16/2007 - 13:50
User Badges:
  • Silver, 250 points or more

Hi Randy,

How about pushing the logs to MARS? The SNARE agent would have to be installed on your NT4 boxes in order to do this. You might also try sending the logs to a LogLogic box and having it forward the logs to MARS.

Hope this helps.



randytoni Fri, 11/16/2007 - 14:00
User Badges:

Thanks Paul - would like to try this next, but after telling the folks who support those boxes that the log pull would be "unobtrusive" (nothing to install, etc.) and then apparently hammering their systems, the odds of getting them to buy into installing the agent are a bit tougher now - but we're working on it. Just hoping there's something in NT4 (among the several bugs) that would explain this particular behaviour



This Discussion