Naftaly shprai's Blog

שיטה לניטור מידע משמעותי מתוך מערכת הניטורים הקיימת בסביבת השו"ב

naftalysh@gmail.com (naftaly shprai) — Mon, 24 Dec 2018 17:51:00 +0200

שיטה לניטור מידע משמעותי מתוך מערכת הניטורים הקיימת בסביבת השו"ב

הכותב:

נפתלי שפריי, naftalysh@gmail.com

נייד: 054-8310965

מבוא:

קיים צורך אמיתי לנטר "מידע משמעותי" לגבי כל סוגי המשאבים המנוטרים בתשתיות.

"מידע משמעותי" מתייחס לשאלה הבסיסית -

"תוך כמה זמן המשאב המנוטר ימוצה בהתייחס לקצב השינוי בשימוש בו".

מידע מסוג זה קל יותר לקשור ל- SLA והוא מביא ערך אמיתי מתוך תשתית הניטור הקיימת.

כיום משתמשים בערכי-סף (Threshold) כדי למתג אירועים, אבל ערכי הסף קשורים בד"כ לערכים גולמיים והם לכשעצמם לא נותנים מענה לצורך.

במסמך זה אתאר שיטה גנרית שתיושם ברמת RULE ב- OMNIBUS (ניתן להשתמש בכל שיטה אחרת)

ותיושם לכל סוג של משאב מנוטר שדוגמים ממנו ערכים גולמיים.

ה- RULE הנ"ל יעבוד במקביל לשאר ה- RULE ים ולא תהיה שום התנגשות ביניהם.

הרחבה:

אנו נדגום את קצב השינוי לאורך מספר נקודות מדידה (כדי לקבל מגמה אמיתית) ועל-בסיס הקצב

הנדגם נוכל לענות על השאלה המודגשת.

עבור רוב המשאבים המנוטרים קיימים הנתונים הבאים:

· Value – ערך נדגם.

· Max – ערך מקסימאלי מותר למשאב.

· Min – ערך מינימאלי מותר למשאב.

· t – זמן מחזור מדידה (כל כמה זמן מודדים את המשאב).

אנו נוסיף משתנים נוספים:

· N – מספר יחידות זמן שבהם יחושב קצב השינוי.

· R – קצב שינוי של הערך הנדגם לזמן של - N*t (N מחזורי מדידה).

· Rav – ממוצע רץ של קצב השינוי.

· TtoMax – זמן מוערך להגעת המשאב למצב MAX.

· TtoMin – זמן מוערך להגעת המשאב למצב MIN.

· TtoMaxThreshold – ערך סף למיתוג אירוע עבור TtoMax.

· TtoMinThreshold – ערך סף למיתוג אירוע עבור TtoMin.

· Array [N] - מבנה נתונים (מערך או STACK) שיכיל בכל רגע את N הדגימות האחרונות.

האירועים ("המידע המשמעותי") שימותגו יהיה מהסוג הבא:

1. TimetoMaxThresholdReached – "עברנו ערך סף של זמן הגעת משאב מנוטר ל- Max.

2. TimetoMinThresholdReached – "עברנו ערך סף של זמן הגעת משאב מנוטר ל- Min.

האלגוריתם:

(בלי הגבלת כלליות אני בוחר ב- N=5 , ז"א מספר יחידות הזמן בהם יחושב קצב השינוי. ניתן לבחור בכל ערך אחר).

-- ה- RULE הבא יופעל כל פעם שיגיע ערך נדגם חדש לתוך Value --

הגדרות משתנים מקומיים ב- RULE

I = 0; /*משתנה זמני שימדוד את מספר המדידות שבוצעו */

N = 5; /* ניתן לבחור כל ערך אחר */

R = Rav = 0;

TtoMax = TtoMin = 0;

Array [0..N-1] = 0;

If (Value >= Max) {

Trigger Event (TimetoMaxThresholdReached);

}

Else If (Value <= Min) {

Trigger Event (TimetoMinThresholdReached);

}

/*הראשונים יש למלא את מערך הערכים הנדגמים כל עוד לא קיבלנו את הנתונים הנדגמים */

If (I < N) {

Array [I++] = Value;

Exit;

}

/* יש לדאוג שהמערך יכיל את הערכים הנדגמים האחרונים בכל פעם */

Array[0..N-2] = Array[1..N-1]; /* save last N-1 values in Array[0..N-2] */

Array[N-1] = Value; /* save last Value in Array[N-1] */

R = (Array [N] – Array [1]( / N;

Rav = (Rav == 0) ? R : (Rav + R) / 2;

If (Rav > 0 and Value < Max) {

TtoMax = ((Max – Value) / Rav) * t;

If (TtoMax <= TtoMaxThreshold) {

Trigger Event (TimetoMaxThresholdReached);

}

Else If (Rav < 0 and Value > Min) {

TtoMin = ((Value - Min) / Rav) * t;

If (TtoMin <= TtoMinThreshold) {

Trigger Event (TimetoMinThresholdReached);

}

הערות לגבי המימוש בפועל:

1. האלגוריתם כתוב בפסידוקוד - ניתן לממש אותו בשפה המתאימה ל- OMNIBUS.

2. ה- "משתנים הנוספים" ימומשו ע"י הוספת שדות נוספים ל- "CLASS אירוע בסיסי" (Base Class) ב- OMNIBUS ,כך שכל CLASS אירוע של ניטור משאב (היורש את ה- Base Class) יירש אותם.

Rebuild procedure for corrupt WINDOWS performance counters

naftalysh@gmail.com (naftaly shprai) — Mon, 17 Aug 2009 00:48:00 +0300

Its have already been discussed a lot, and correction methods have been placed.

A good place to start is in “http://support.microsoft.com/kb/300956”

In Windows Server 2003 and 2008 Microsoft even provides some sort of a rebuild solution (in the article), but it relies on the existence of all the performance counters ini files in the %Systemroot%\System32 directory, which doesn’t include many third party performance counters ini files.

“
To rebuild all Performance counters including extensible and third-party counters in

Windows Server 2003, type the following commands at a command prompt. Press ENTER after each command.

cd\windows\system32
lodctr /R
”

Nevertheless to my recollection ,there wasn’t one thorough solution presented that took into account the following:

1. The interrelations of WMI and the Performance counter mechanism.

(best described in “http://support.microsoft.com/kb/266416”)

2. How to find the most current .ini files that relate to the most current performance counters installed in the system including third-party.

3. A complete solution that automates the all process.

4. We should make sure that the dat files to rebuild the base performance counter libraries are from the proper installation disk of the worked-on operating system - Perfc009.dat file and the Perfh009.dat file. These files are located on the Windows Installation Disc. The compressed files are found at DriveLetter:\i386\perfc009.da_ and at DriveLetter:\i386\perfh009.da_. As part of our restoration procedure, we shall replace the files that are in the %Systemroot%\System32 folder.

5. all the vbe scripts are encoded scripts that
are produced with the screnc executable (a Microsoft utility).

screnc example.vbs example.vbe

My solution guidelines -

1. WMI uses the performance counters info in its own classes that fills-up its repository (raw and processed).

WMI manages its performance counter information, loading the performance library using ADAP ( AutoDiscovery/AutoPurge ).

We shall use the following procedures before and after the Performance counters restoration process to follow -

Before restoration -
winmgmt /clearadap

This command clears all WMI-related values from the service's performance registry key.

After restoration -

winmgmt /resyncperf "winmgmt service pid"

(for higher versions from Windows 2000 use just:
winmgmt /resyncperf ).

This command registers the computer's performance libraries with the WMI.

2. To find the most current Performance counters .ini files – we do the obvious – just search all over the relevant logical drives (we exclude those whom we know for sure that doesn’t include such ini files).

For each ini file found we choose the most current one (its creation date is more current).

3. The solution is embodied in a batch file like the following

ResetPerfCounters.bat -

        1: winmgmt /clearadap

       2: expand perfc009.da_ %SystemRoot%\system32\PERFC009.DAT

       3: expand perfh009.da_ %SystemRoot%\system32\PERFH009.DAT

       4: REM Clean Registry Performance-Counter Settings (Base + Extended Performance Counters Settings) ...

       5: cscript //NoLogo //H:CScript ResetPerf.vbe        

       6: REM Finished Cleaning Registry Performance-Counter Settings.

       7: REM %SystemDrive%

       8: REM CD %SystemRoot%\system32

       9: DEL /F /Q c:\inifiles.txt

      10:  

      11: REM re-add the extensible counters from the list of services

      12: REM fetch the list of ini files of services using performance counters ...

      13: REM FINDSTR /I /M drivername= *.ini  > c:\inifiles.txt

      14:  

      15: cscript //NoLogo //H:CScript FindDriverIniFiles.vbe c:\inifiles.txt

      16: cscript //NoLogo //H:CScript DoLoadCtr.vbe c:\inifiles.txt

      17: REM Winmgmt /resyncperf

      18: cscript //Nologo //H:CScript ResyncPerf.vbe

      19: ECHO --- Done !

      20:  

      21:  

      22:  

      23:  

      24:  

      25:

ResetPerf.vbe - cleans all the registry entries of the performance counters

ResetPerf.vbs listed -

       1: Option Explicit

       2: On Error Resume Next

       3:  

       4: Dim WshShell

       5: Dim refRegistry

       6: Dim strValueData

       7: Dim strSKPath

       8: Dim strValueName

       9: Dim strMessage  'container for the combined message

Dim strWQL  ' This string represent the WMI query.

Dim strResult 

Dim arrSubKeys(2)

Dim strSubKey1

Dim strSubKey2

Dim strKeyBase

Dim strKeyPath

  

Const REG_SZ = 1

Const REG_EXPAND_SZ = 2

Const REG_BINARY = 3

Const REG_DWORD = 4

Const REG_MULTI_SZ = 7

  

Const HKEY_CLASSES_ROOT = &H80000000

Const HKEY_CURRENT_USER = &H80000001

Const HKEY_LOCAL_MACHINE = &H80000002

Const HKEY_USERS = &H80000003

Const HKEY_CURRENT_CONFIG = &H80000005

Const HKEY_DYN_DATA = &H80000006

  

Const StrHKEY_CLASSES_ROOT         = "HKEY_CLASSES_ROOT"

Const StrHKEY_CURRENT_USER         = "HKEY_CURRENT_USER"

Const StrHKEY_LOCAL_MACHINE     = "HKEY_LOCAL_MACHINE"

Const StrHKEY_USERS             = "HKEY_USERS"

Const StrHKEY_CURRENT_CONFIG     = "HKEY_CURRENT_CONFIG"

Const StrHKEY_DYN_DATA             = "HKEY_DYN_DATA"

  

Const strBasePerfPath            = "Software\Microsoft\Windows NT\CurrentVersion\Perflib"      '"Software\Microsoft\Windows NT\CurrentVersion\Perflib"

Const strExtPerfPath            = "System\CurrentControlSet\Services"                        '"System\CurrentControlSet\Services"

  

Function DelValue(refRegistry, KeyBase, KeyPath, strValueName)

    Dim lRC 

    

    DelValue = True

    lRC = refRegistry.DeleteValue(KeyBase, KeyPath, strValueName)

  

    If (lRC <> 0) Or (Err.Number <> 0) Then

        DelValue = False

        Exit Function

    End If

End Function

  

Function GetStringValue(refRegistry, KeyBase, KeyPath, strValueName, strValueData) 

    If refRegistry.GetStringValue(KeyBase,_

                                  KeyPath, _

                                  strValueName, _

                                  strValueData) = 0 Then    

        GetStringValue = strValueData                                  

    Else

        GetStringValue = "GetError"

    End If

End Function

  

Function SetStringValue(refRegistry, KeyBase, KeyPath, strValueName, strValueData) 

    If refRegistry.SetStringValue(KeyBase,_

                                  KeyPath, _

                                  strValueName, _

                                  strValueData) = 0 Then    

        SetStringValue = strValueData

    Else

        GetStringValue = "SetError"

    End If

End Function

  

Function SetDWORDValue(refRegistry, KeyBase, KeyPath, strValueName, ValueData) 

    Dim lRC 

    

    SetDWORDValue = True

    lRC = refRegistry.SetDWORDValue(KeyBase, KeyPath, strValueName, ValueData)

    

    If (lRC <> 0) Or (Err.Number <> 0) Then

        SetDWORDValue = False

        Exit Function

    End If

End Function

  

'display output

'WshShell.Popup strIndent & KeyPath, 1, "KeyBase = " & KeyBaseStr , 0

  

  

Function DoBasePerformanceReset(refRegistry, KeyBase, KeyPath, KeyBaseStr)

On Error Resume Next

  

    DoBasePerformanceReset = True

  

    'display output

    WshShell.Popup "KeyBase = " & KeyBaseStr & "KeyPath = " & KeyPath & vbCrLf & _

            "change the [Last Counter] value to 1846 (decimal), and change the [Last Help] value to 1847 (decimal). ", _

            2, KeyPath, 0

        

    If (SetDWORDValue(refRegistry, KeyBase, KeyPath, "Last Counter", 1846) = False) Then

        WScript.Echo "Could not change DWORD [LastCounter] value to 1846" 

        DoBasePerformanceReset = False

        Exit Function

    End If        

    

    If (SetDWORDValue(refRegistry, KeyBase, KeyPath, "Last Help", 1847) = False) Then

        WScript.Echo "Could not change DWORD [LastCounter] value to 1846" 

        DoBasePerformanceReset = False

        Exit Function

    End If        

End Function

  

  

Function DoExtPerformanceReset(refRegistry, KeyBase, KeyPath, KeyBaseStr)

On Error Resume Next

  

    Dim lRC1

    Dim lRC2

  

  

    DoExtPerformanceReset = True

    Err.Clear 

    'display output

    WshShell.Popup "KeyBase = " & KeyBaseStr & "KeyPath = " & KeyPath & vbCrLf & _

                    "Remove the following values ([First Counter],[First Help],[Last Counter],[Last Help],[Disable Performance Counters]) " & vbCrLf & _

                    "from the Performance subkey (if they exist) ", _

                    2, KeyPath, 0

        

    'enumerate subkeys (the Services Subkeys - looking for a "Performance" subkey) ...

    lRC1 = refRegistry.EnumKey(KeyBase, KeyPath, arrSubKeys(1))

    If (lRC1 = 0) And (Err.Number = 0) And (Not IsNull(arrSubKeys(1))) Then

        For Each strSubKey1 In arrSubKeys(1)

            'recursively call ourselves

            lRC2 = refRegistry.EnumKey(KeyBase, KeyPath & "\" & CStr(strSubKey1), arrSubKeys(2))

            If (lRC2 = 0) And (Err.Number = 0) And (Not IsNull(arrSubKeys(2))) Then

                For Each strSubKey2 In arrSubKeys(2)

                    If (StrComp(CStr(strSubKey2), "Performance", 1) = 0) Then

                        If (ChangePerfValues (refRegistry, KeyBase, KeyPath & "\" & CStr(strSubKey1) & "\" & CStr(strSubKey2), KeyBaseStr) = False) Then

                            WScript.Echo "Could not delete DWORD values: ([First Counter],[First Help],[Last Counter],[Last Help]) under " & _

                                         KeyBaseStr & "\" & KeyPath & "\" & CStr(strSubKey1) & "\" & CStr(strSubKey2)

                            DoExtPerformanceReset = False

                            Exit Function

                        End If

                        Exit For

                    End If

                Next

            ElseIf Err.Number > 0 Then

                DoExtPerformanceReset = False

                WScript.Echo "EnumKey Failed on - KeyBase = " & KeyBaseStr & " KeyPath = " & KeyPath & "\" & CStr(strSubKey1) & _

                    vbCrLf & Err.Description & vbCrLf

                Err.Clear 

            End If

        Next

    ElseIf Err.Number > 0 Then

        DoExtPerformanceReset = False

        WScript.Echo "EnumKey Failed on - KeyBase = " & KeyBaseStr & " KeyPath = " & KeyPath & _

            vbCrLf & Err.Description & vbCrLf

        Err.Clear 

    End If

End Function

  

  

'Remove the following values ("First Counter","First Help","Last Counter","Last Help") from the Performance subkey (if they exist).

Function ChangePerfValues(refRegistry, KeyBase, KeyPath, KeyBaseStr)

On Error Resume Next

  

    Dim lRC

    Dim sNames

    Dim iTypes

    Dim i

    

    ChangePerfValues = True

    

    lRC = refRegistry.EnumValues(KeyBase, KeyPath, sNames, iTypes)

    If (lRC = 0) And (Err.Number = 0) And (Not IsNull(sNames)) Then

        For i = LBound(sNames) To UBound(sNames)

            If ((StrComp(CStr(sNames(i)), "Disable Performance Counters", 1) = 0) Or _

                (StrComp(CStr(sNames(i)), "First Counter", 1) = 0) Or _

                (StrComp(CStr(sNames(i)), "First Help", 1) = 0) Or _

                (StrComp(CStr(sNames(i)), "Last Counter", 1) = 0) Or _

                (StrComp(CStr(sNames(i)), "Last Help", 1) = 0)) Then

                lRC = refRegistry.DeleteValue(KeyBase, KeyPath, CStr(sNames(i)))

                If (Err.Number > 0) Then

                    Err.Clear 

                    ChangePerfValues = False

                    WScript.Echo "DeleteValue Failed on - KeyBase = " & KeyBaseStr & " KeyPath = " & KeyPath & " Value = " & CStr(sNames(i)) & _

                        vbCrLf & Err.Description & vbCrLf

                    Exit Function

                End If

            End If

        Next

    ElseIf Err.Number > 0 Then

        ChangePerfValues = False

        WScript.Echo "EnumValues Failed on - KeyBase = " & KeyBaseStr & " KeyPath = " & KeyPath & _

            vbCrLf & Err.Description & vbCrLf

        WScript.Echo Err.Description & vbCrLf

        Err.Clear 

    End If

End Function

  

  

'Beginnning of main code ...

set WshShell = WScript.CreateObject("WScript.Shell")

Set refRegistry = GetObject("winmgmts:root\default:StdRegProv")

  

If (DoBasePerformanceReset(refRegistry, HKEY_LOCAL_MACHINE, strBasePerfPath, StrHKEY_LOCAL_MACHINE) = True) Then

    If (DoExtPerformanceReset(refRegistry, HKEY_LOCAL_MACHINE, strExtPerfPath, StrHKEY_LOCAL_MACHINE) = True)  Then

            Wscript.Echo Wscript.ScriptFullName  & " - Success !" & vbCrLf

    Else

            Wscript.Echo Wscript.ScriptFullName  & "(DoExtPerformanceReset) - Failed !" & vbCrLf

    End If

Else

    Wscript.Echo Wscript.ScriptFullName & "(DoBasePerformanceReset) - Failed !" & vbCrLf

End If

  

'Clean variables ...

Set refRegistry = Nothing

Set WshShell = Nothing

  

  

  



FindDriverIniFiles.vbe – finds all the performance counters ini files and lists their full pathname into an output file.

FindDriverIniFiles.vbs listed -

       1: On Error Resume Next

       2: Const OverwriteExisting = True

       3: Const WindowsFolder       = 0

       4: Const SystemFolder       = 1

       5: Const TemporaryFolder     = 2

       6:  

       7: Dim WshShell

       8: Dim WshSysEnv

       9: Dim objWMIService 

Dim colLogicalDisks 

Dim colLogicalDisk 

Dim DiskIndex

Dim strIniListFile

Dim tmpStr

Dim tmpIniFile

Dim ProcessIDs()

Dim ProcessID

Dim strProcessIDs

Dim WorkDir

  

Err.Clear     'Clear Errors

If WScript.Arguments.Count = 0 Then        

    WScript.Echo "Format: " & WScript.ScriptFullName & vbTab & "<INI output listfile>" & vbCrLf

     WScript.Quit 0                        

Else                                    

    strIniListFile = WScript.Arguments(0)    

End If    

'strIniListFile = "c:\inifiles.txt"

  

  

Set WshShell = WScript.CreateObject("WScript.Shell")

dim wshFSO :    Set wshFSO = CreateObject("Scripting.FileSystemObject")

WorkDir = wshFSO.GetSpecialFolder(WindowsFolder) & "\system32"  

Set wshFSO = Nothing

  

  

WScript.Echo "Starting search for Perf. Counters  ini files in (" & Now & ")" 

WScript.Echo "Be patient - it may take up to 20 minutes !" 

  

'"%WINDIR%\System32\CScript.exe //nologo ""%1"" %*"

Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & ".\root\cimv2")

Set colLogicalDisks = objWMIService.ExecQuery("Select * from Win32_LogicalDisk Where MediaType = 12 And VolumeName <> 'Exchange'")

  

DiskIndex = 0

For each colLogicalDisk in colLogicalDisks 

    DiskIndex = DiskIndex  + 1

    Redim Preserve ProcessIDs(DiskIndex-1)

    

    Wscript.Echo "Searching Perf Counters INI files in: " & vbTab & colLogicalDisk.Name 

    

    tmpIniFile = "c:\IniFiles" & DiskIndex & ".txt"     

    tmpStr = "CMD /C FINDSTR /S /I /M drivername= " & colLogicalDisk.Name  & "\*.ini   > " & tmpIniFile

    ProcessID = RunCommand(tmpStr)

    If (ProcessID = -1 ) Then

           WScript.Echo "Error Running " & tmpStr 

           Set colLogicalDisks = Nothing

        WScript.DisconnectObject(WshShell)

        Set WshShell = Nothing

           WScript.Quit 1

       End If

        

    ProcessIDs(DiskIndex-1) = ProcessID

    'WshShell.Run tmpStr, 7, true

Next

  

    

strProcessIDs = ""

For each ProcessID in ProcessIDs

    If strProcessIDs <> "" Then

        strProcessIDs = strProcessIDs & " Or ProcessId = '" & ProcessID & "' " 

    Else

        strProcessIDs = strProcessIDs & "ProcessId = '" & ProcessID & "' " 

    End If

Next

  

Do Until CheckProcesses() = True

    WshShell.Popup "Still searching Perf Counters INI files ..", 3," Working ...", vbInformation 

    WSCript.Sleep  10000

Loop

    

DiskIndex = 0

For each colLogicalDisk in colLogicalDisks 

    DiskIndex = DiskIndex  + 1

    tmpIniFile = "c:\IniFiles" & DiskIndex & ".txt" 

    Call CombineIniFiles(tmpIniFile, strIniListFile)    'Prefix lines with LogicalDisk name ...

Next

  

  

Set colLogicalDisks = Nothing

Set objWMIService = Nothing

WScript.DisconnectObject(WshShell)

Set WshShell = Nothing

WScript.Echo "Finished search for Perf. Counters  ini files in (" & Now & ")"

WScript.Quit 0

  

  

Function CombineIniFiles (strInFile, strOutFile)

    Const ForReading = 1, ForWriting = 2, ForAppending = 8

  

    Dim objFSO

    Dim objFile

    Dim arrFileLines()

    Dim arrFileLine

    Dim i

    

    i = 0

    Set objFSO = WScript.CreateObject("Scripting.FileSystemObject")

    Set objFile = objFSO.OpenTextFile(strInFile, ForReading)

  

    Do Until objFile.AtEndOfStream

        Redim Preserve arrFileLines(i)

        arrFileLines(i) = objFile.ReadLine

        i = i + 1

    Loop

    objFile.Close

    

    Set objFile = objFSO.OpenTextFile(strOutFile, ForAppending, True)

    For Each arrFileLine in arrFileLines

        objFile.WriteLine arrFileLine

    Next

    objFile.Close

  

  

    WScript.DisconnectObject(objFSO)

    Set objFSO = Nothing

End Function

  

  

Function RunCommand (strCmd)

    Const HIDDEN_WINDOW = 12

    Const Normal = 32

    Const Idle = 64

    Const High = 128

    Const Realtime = 256

    Const Above_Normal = 16384 

    Const Below_Normal = 32768 

    

    

    Dim objStartup

    Dim objConfig

    Dim errReturn

        

    Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & ".\root\cimv2")

    Set objStartup = objWMIService.Get("Win32_ProcessStartup")

    Set objConfig = objStartup.SpawnInstance_

    objConfig.ShowWindow = HIDDEN_WINDOW

    objConfig.PriorityClass = Normal

    Set objProcess = GetObject("winmgmts:root\cimv2:Win32_Process")

    errReturn = objProcess.Create(strCmd, WorkDir, objConfig, intProcessID)

    

    If errReturn = 0 Then

        RunCommand = intProcessID

    Else

        RunCommand = -1    'Error

    End If

  

End Function

  

  

Function CheckProcesses()

    Dim colProcessList

    

  

    Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & ".\root\cimv2")

    Set colProcessList = objWMIService.ExecQuery ("Select * from Win32_Process Where " & strProcessIDs) 

    If (Not IsEmpty(colProcessList)) And (colProcessList.Count > 0) Then

        CheckProcesses = False

        Set colProcessList = Nothing

        Exit Function

    Else

        CheckProcesses = True        'No "findstr" processes running anymore ...

        Set colProcessList = Nothing

    End If

End Function

DoLoadCtr.vbe – looks in the input file and lodctr only the most current ini files listed.

DoLoadCtr.vbs listed -

       1: Option Explicit

       2: Const OverwriteExisting = True

       3: Const WindowsFolder       = 0

       4: Const SystemFolder       = 1

       5: Const TemporaryFolder     = 2

       6: Const ForReading = 1, ForWriting = 2, ForAppending = 8

       7: Const TristateUseDefault = -2, TristateTrue = -1, TristateFalse = 0

       8: Const dtBeginOfDate = #1/1/2601#

       9:  

Dim objFileDictionary

Dim objCounternameDictionary

Dim objCounterFilesDictionary

Dim objRootCounterFilesDictionary

  

Dim objFSO

Dim strInputFilename

Dim objTextFile

Dim strShortFilename

Dim index

Dim strNextLine

Dim objArgs

Dim WshShell

Dim Return

Dim objItem

Dim FileParts

Dim dtCurrentDateTime

Dim dtNewDateTime

Dim strCounterName

Dim WorkDir

  

Set objArgs = WScript.Arguments       ' Create object.

If objArgs.Count = 1 Then

       strInputFilename = trim(objArgs(0))

Else

    WScript.Echo "Format: cscript " & WScript.ScriptName & " ini-files-listfile"

    Err.Clear 

    WScript.Quit

End If

  

  

Set WshShell = WScript.CreateObject("WScript.Shell")

Set objFileDictionary = WScript.CreateObject("Scripting.Dictionary")

Set objCounternameDictionary = WScript.CreateObject("Scripting.Dictionary")

  

Set objFSO = CreateObject("Scripting.FileSystemObject")

WorkDir = objFSO.GetSpecialFolder(WindowsFolder) & "\system32"  

Set objTextFile = objFSO.OpenTextFile(strInputFilename, ForReading)

index = 0

  

  

'Dim objDictionary

'Dim objTimeDictionary

'Dim objFileDictionary

  

'CheckFileNewer(sFilename, dtCurrentDateTime, dtNewDateTime)    

Do Until objTextFile.AtEndOfStream 

    strNextLine = Trim(objTextFile.Readline)

    FileParts = Split(strNextLine, "\", -1, 1)

    strShortFilename = Trim(FileParts(UBound(FileParts)))

    dtNewDateTime = GetFileDate(strNextLine)

    

    If Not objFileDictionary.Exists(strShortFilename) Then

        Set objCounterFilesDictionary = WScript.CreateObject("Scripting.Dictionary")    'Dict for each uniq filename.

  

        strCounterName = GetCounterName(strNextLine)

        objCounternameDictionary.Add strShortFilename, strCounterName

        objCounterFilesDictionary.Add dtNewDateTime, """" & strNextLine & """"

        objFileDictionary.Add strShortFilename, objCounterFilesDictionary

    Else

        if Not(objFileDictionary(strShortFilename).Exists(dtNewDateTime)) Then

            objFileDictionary(strShortFilename).Add dtNewDateTime, """" & strNextLine & """"        'insert at the end of dictionary

        End If

    End If

     

    index = index + 1

Loop

    

WScript.Echo "Found [" & index & "] performance-counters ini files ..." & vbCrLf

For Each objItem in objFileDictionary

    DoRunLodctr(objFileDictionary(objItem))

Next

  

  

  

  

Function GetOldestFileDate(FileDict, dtNewestDate)

    Dim dtOldestDate

    Dim FileElemDate

    

    dtOldestDate = dtNewestDate

    For Each FileElemDate In FileDict

        If (DateDiff("n", dtOldestDate, CDate(FileElemDate)) < 0) Then 

            dtOldestDate = CDate(FileElemDate)

        End If

    Next

  

    GetOldestFileDate = dtOldestDate

End Function

  

  

Sub DoRunLodctr(FileDict)

    Dim i, count

    Dim FileElem

    Dim OldestDate

    

    count = FileDict.Count 

    OldestDate = dtBeginOfDate

    Do

        count = count - 1

           OldestDate = GetOldestFileDate(FileDict, OldestDate)

        WScript.Echo "lodctr.exe " & FileDict(OldestDate) 

        Return = WshShell.Run("%windir%\system32\" & "lodctr.exe " & FileDict(OldestDate), 0, TRUE)

    Loop While (Count > 0)

End Sub

  

WScript.DisconnectObject(WshShell) 

Set WshShell = Nothing

WScript.DisconnectObject(objFileDictionary) 

Set objFileDictionary = Nothing

WScript.DisconnectObject(objCounternameDictionary) 

Set objCounternameDictionary = Nothing

WScript.DisconnectObject(objFSO) 

Set objFSO = Nothing

WScript.Quit 

  

  

  

Function CheckFileNewer(sFilename, sDate, sNewDate)    'return True if newer ; False if not.

       Dim fso, f

  

       Set fso = CreateObject("Scripting.FileSystemObject")

       Set f = fso.GetFile(sFilename)

       If (DateDiff("n", sDate, f.DateLastModified) > 0) Then 

           CheckFileNewer = True

        sNewDate = CDate(f.DateLastModified)

       Else

           CheckFileNewer = False

       End If

    

    set f = Nothing : set fso = Nothing

End Function

  

  

Function GetFileDate(sFilename)

       Dim fso, f

  

       Set fso = CreateObject("Scripting.FileSystemObject")

       Set f = fso.GetFile(sFilename)

       GetFileDate = CDate(f.DateLastModified)

    

    set f = Nothing : set fso = Nothing

End Function

  

  

Function GetCounterName(sFilename)

       Dim fso, f, ts

       Dim MyArray

       Dim str

       Dim RegResult

  

     Set fso = CreateObject("Scripting.FileSystemObject")

     Set f = fso.GetFile(sFilename)

       Set ts = f.OpenAsTextStream(ForReading, TristateUseDefault)

       

       If ts.AtEndOfStream Then

        GetCounterName = "Error"

        set ts = Nothing : set f = Nothing : set fso = Nothing       

        Exit Function

       End If

       

       str = ts.ReadAll

     ts.Close

    set ts = Nothing : set f = Nothing : set fso = Nothing       

  

    RegResult = RegExpFunction("drivername=[a-zA-Z0-9_.]+\b", str)

    If (RegResult = "Error") Then

        GetCounterName = "Error"

        Exit Function

    End If

    

    MyArray = Split(RegResult, "=", -1, vbTextCompare)

    GetCounterName = Trim(MyArray(1))

End Function

  

  

'*******************************************************

' Finding a pattern in a string using the RegExp object

'*******************************************************

Function RegExpFunction(patrn, strng)

On Error Resume Next

    Dim regEx, IDs

  

  

    Err.Clear

    Set regEx = CreateObject("VBScript.RegExp")    ' Create a regular expression.

    regEx.Pattern = patrn            ' Set pattern.

    regEx.IgnoreCase = True          ' Set case insensitivity.

    regEx.Global = True              ' Set global applicability.

    Set IDs = regEx.Execute(strng)    ' Execute search.

    

    If IDs.Count = 0 Then    'No matches found

        RegExpFunction = "Error"

    Else

        RegExpFunction = CStr(IDs(0).Value)

    End If

    Set regEx = Nothing

End Function

  



Enjoy ..

Technorati Tags: Performance counters. Windows,monitoring,automated solution,naftaly shprai,tivoli,CA,HP,MOM,ESM,WMI,ADAP,VBS