How to capture processed NSEs on the Notification Server

Products

• Client Management Suite

Issue/Introduction

To facilitate troubleshooting, you wish to capture processed NSEs for review.

Environment

ITMS 7.x, 8.x

Resolution

To capture processed NSEs

1. Open Regedit
2. Navigate to 'HKLM\SOFTWARE\Altiris\eXpress\Notification Server'
3. Create a string value named EventCopyFolder.
   1. Edit the EventCopyFolder value to point to a file location where all NSEs will be copied during processing. 
   2. Ensure this destination folder has been created on the file system.

Optional: To capture NSE files that were discarded due to an error

1. Open Regedit
2. Navigate to 'HKLM\SOFTWARE\Altiris\eXpress\Notification Server'
3. Create a string value named EventFailureBackupFolder.
   1. Edit the EventFailureBackupFolder value to point to a file location where all NSEs will be copied during processing. 
   2. Ensure this destination folder has been created on the file system.

To apply changes restart the Altiris Service.

Note:
Starting with ITMS 8.5 release, you can change these 2 core settings in the Symantec Management Console. Open Settings>Notification Server>Core Settings> and filter for "EventCopyFolder" for example and add the path where you want to save these NSEs. 

 

Caution! On a busy Notification Server the number of events processed per day can be well above 10,000 (on large production systems daily load can be upward of 300,000 events) so make sure that the destination folder has the capacity to hold the events for the period of the capture. Also ensure that the capture will not interfere with the standard processing of events (creating disk contention or similar problems) and impact the overall system performance.

Make certain to reverse these changes after capturing required NSEs to save on server resources.