logo       

RE: [INV] Problem with Basic File Scan and Custom Filter: msg#00368

sysutils.tivoli.tme10

Subject: RE: [INV] Problem with Basic File Scan and Custom Filter





Yes, it did work by doing as you suggested(change apply custom filter from
yes to no) . However
>So, if you have enabled custom filters but haven't added the names of the
>files you're searching for into the custom filters list, then you are
>telling the Basic File scanner to search for NULL (absolutely nothing);
>which I think is what you've been getting - right?

yes, thats what I was getting(nothing), but I did put the files I was
searching for into the custom filter list. That's why I said the doc seemed
contrary to what you were saying, and how it appears to be working. At this
point, I've read it so many times, I need to walk away from it a bit and
reread it later...
Thanks





"Jana Garner"

<jana_garner@gulf To:
<tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx>

soft.com> cc:

Sent by: Subject: RE: [tme10][INV]
Problem with Basic File Scan and Custom Filter
owner-tme10@lists

.us.ibm.com





11/24/2004 09:24

PM

Please respond to

tme10









Chris,

The general directory and file filter settings are for controlling where
the
software scanners look (the dirs) and what they look for (the files). In
Windows, those filters are used by the Software Signature scanner, the
Header File scanner, and the Basic File scanner. The custom filter is only
used with the Basic File scanner and is optional. If you enable the custom
filter, then you are telling the Basic File scanner that although it will
continue to look in the places you specified in your general filters, it
will only collect the files that match the literal names of those you've
placed in the custom filter list. The custom filter list is a global option
and whatever files you specify in it will be available to all your
InventoryConfig profiles. The files in the custom filter list are stored in
the Configuration Repository in the FILE_FILTER table.

So, if you have enabled custom filters but haven't added the names of the
files you're searching for into the custom filters list, then you are
telling the Basic File scanner to search for NULL (absolutely nothing);
which I think is what you've been getting - right?

Did you try my suggestion? If not, try it on an Endpoint that you know will
contain at least one of the files that you want to find.

Regards,
Jana


----------------------------------
Jana Garner
Enterprise Consultant
Gulf Breeze Software
jana_garner-9LkaxTQlAnxWk0Htik3J/w@xxxxxxxxxxxxxxxx
336-253-1184
www.gulfsoft.com



-----Original Message-----
From: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
[mailto:owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx] On
Behalf Of cchupela-/XXsUEQ2sgNBDgjK7y7TUQ@xxxxxxxxxxxxxxxx
Sent: Wednesday, November 24, 2004 6:30 PM
To: tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Subject: RE: [tme10][INV] Problem with Basic File Scan and Custom Filter





Jana, I've looked at the doc for it, and also for wsetinvpcsw, specifically
the 'apply custom filter' part:

"When this option is set to Y, a scan for basic file information includes
only the files specified in the custom filter. "

Maybe I'm missing something, but that sounds like what I'm trying to do -
limit the basic file scans to a select list of files. Why do you suggest
turning off apply

custom filter?


Chris







"Jana Garner"

<jana_garner@gulf To:
<tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx>

soft.com> cc:

Sent by: Subject: RE: [tme10][INV]
Problem with Basic File Scan and Custom Filter
owner-tme10@lists

.us.ibm.com





11/24/2004 03:17

PM

Please respond to

tme10










Hi Chris,

Change "Apply custom filter to basic file information scan results" from
"YES" to "NO". Then redistribute.

For information on how to use custom filters reference command: winvfilter.

/Jana

----------------------------------
Jana Garner
Enterprise Consultant
Gulf Breeze Software
www.gulfsoft.com



-----Original Message-----
From: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
[mailto:owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx] On
Behalf Of cchupela-/XXsUEQ2sgNBDgjK7y7TUQ@xxxxxxxxxxxxxxxx
Sent: Wednesday, November 24, 2004 11:50 AM
To: tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Subject: Re: Antwort: Re: Antwort: [tme10][INV] Problem with Basic File
Scan
and Custom Filter





The intent was to look for *.mp3, *.avi, bcond.exe and 3000schd.exe

Chris


<Tivoli>
<Inventory>
<Software>
<Technology Name="File Scan"/>
<Technology Name="Native Scan"/>
<Technology Name="Basic"/>
<Technology Name="Filter"/>
<Technology Name="Exclude Directory" Value="*/TMP/"/>
<Technology Name="Exclude Directory" Value="*/TEMP/"/>
<Technology Name="Exclude Directory" Value="/RECYCLED/"/>
<Technology Name="Exclude Directory" Value="/RECYCLER/"/>
<Technology Name="Mask Type" Value="Include"/>
<Technology Name="File Mask" Value="*.MP3"/>
<Technology Name="File Mask" Value="*.AVI"/>
<Technology Name="File Mask" Value="BCOND.EXE"/>
<Technology Name="File Mask" Value="3000SCHD.EXE"/>
</Software>
</Inventory>
</Tivoli>




yusuf_demir@xxxxx

e To:
tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

Sent by: cc:

owner-tme10@lists Subject: Antwort: Re:
Antwort: [tme10][INV] Problem with Basic File Scan and Custom
.us.ibm.com Filter





11/24/2004 03:30

AM

Please respond to

tme10













Can you send your wscanner.cfg file to the mailing list ? Probably there is
something
wrong with the filter settings, since you do not find the file types in the
tivfscan.mif when
the scan completes.


Mit freundlichen Gruessen / best regards

Yusuf Demir
IDG mbH / PS-SYS2-SM

Tel: 0221/308-29838
Mobil: 0160-4757963
E-Mail: Yusuf_Demir-036LXszk8b4@xxxxxxxxxxxxxxxx




cchupela-/XXsUEQ2sgNBDgjK7y7TUQ@xxxxxxxxxxxxxxxx@lists.us.ibm.com on 23.11.2004
19:01:11

Bitte antworten an tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

Gesendet von: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx


An: tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Kopie:
Thema: Re: Antwort: [tme10][INV] Problem with Basic File Scan and Custom
Filter





no data on the files in the mif... wscanner.cfg on the endpoint shows the
correct settings.




yusuf_demir@xxxxx

e To:
tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

Sent by: cc:

owner-tme10@lists Subject: Antwort:
[tme10][INV] Problem with Basic File Scan and Custom Filter
.us.ibm.com



11/23/2004 04:55
AM

Please respond to

tme10











What about the tivfscan.mif file ? Do you find any entries there about the
file types you are looking for ?


Mit freundlichen Gruessen / best regards

Yusuf Demir
IDG mbH / PS-SYS2-SM

Tel: 0221/308-29838
Mobil: 0160-4757963
E-Mail: Yusuf_Demir-036LXszk8b4@xxxxxxxxxxxxxxxx






cchupela-/XXsUEQ2sgNBDgjK7y7TUQ@xxxxxxxxxxxxxxxx@lists.us.ibm.com on 22.11.2004
23:28:59

Bitte antworten an tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

Gesendet von: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx


An: tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Kopie:
Thema: [tme10][INV] Problem with Basic File Scan and Custom Filter





fw 3.71 + fp04+patches 117,125
Inventory 4.0+fp08
winnt 4.0 endpoint, lcf 109
Inventory scanning works fine for hardware scans, and also software
signature scanning.

I'm attempting to setup an inventory profile to scan for software only. I
have a list of custom applications to look for. The same filename could be
different sizes on different machines, so putting them in the software
dictionary is not an option, since I don't know how many different versions
of the file there are.

I setup the inventory profile, with the following settings:


Scan for and update basic file information: BOTH
Cyclic Redundancy Check: No CRC
Scan for and update header information: NO
Scan for and update PC registry information: BOTH
Scan for and update matching software signatures: BOTH
Apply custom filter to basic file information scan results: YES
Executable files only: NO

No Include Directories
Exclude Directories:
*/TMP/
*/TEMP/
/RECYCLED/
/RECYCLER/
Include File Types:
*.MP3
*.AVI
BCOND.EXE
3000SCHD.EXE
No Custom Mif Files
No script to run after scan


I distribute the scan to an endpoint that I know contains one of the file
types, and the file is NOT in a directory that is in the exclude directory
list. Scan runs, reports that it completed successfully, but does not
return any data. Looks like no data in the MIF file. Its getting back up
the collector hierarchy, because when I do a wqueryinv -s against the
endpoint, the software data has been wiped out. If I run my fullscan
profile, which does hardware, and software signature matching only, the
software query then returns results. Running this problem query again will
wipe out the data for the software query for this endpoint.

Anyone see anything obvious I'm doing wrong?

Thanks.


I had also tried turning off scanning for matching software signatures,
with same result.























<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise