Trapping NSEs on a Windows client

book

Article ID: 180102

calendar_today

Updated On:

Products

Management Platform (Formerly known as Notification Server)

Issue/Introduction

 

Resolution

Question

For troubleshooting purposes, it can be useful to trap a copy of each outgoing NSE file that the Symantec Management Agent for Windows sends to the Notification Server.

Answer

A good resource when troubleshooting client-side issues involving NSEs is the option to capture NSEs as they are sent to the server.

Capture NSEs on the client by:

  1. Open Registry Editor
  2. Navigate to HKEY_LOCAL_MACHINE\Software\Altiris\Altiris Agent\Transport
  3. Modify the String value "Capture Events Folder" so that the Value data points to a directory or path, for example, "C:\Temp".
  4. Perform the actions to troubleshoot, such as Collecting Inventory, Installing Software, or performing a Patch Management scan (run "AeXPatchUtil.exe /i" as outlined in HOWTO4198.)

Analyze what NSEs are being sent from this client machine. To test if the NS is processing them, copy the captured NSE to C:\ProgramData\Symantec\SMP\EventQueue\EvtQFast.

Be sure to remove the value from this registry entry after testing as it will eventually consume significant disk space.