What are the files with extensions of .ok, .blocked, .disabled and that look like a NSE?

Products

• IT Management Suite

Issue/Introduction

You may had noticed some files stored under C:\Program Files\Altiris\Altiris Agent\Queue\<yourSMPserver> like the following:

NSE-FFF-0000006A-0000004F.ok

PSE-12C-0000006A-00000000.ok

What exactly are these files with the extension of .ok, .blocked, .disabled?

Environment

ITMS 8.x

Resolution

The SMA agent creates these files in NSE capture folder on the agent side and these files can be found only in the capture folder C:\Program Files\Altiris\Altiris Agent\Queue\<yourSMPserver>.  The following describes what each of these file types are:

.ok – means event was sent OK
.blocked – means event wasn’t sent because the agent is not registered
.disabled – means that NSE are disabled on the agent side

The suffix could be PSE and NSE, where:

NSE – event was sent to the server directly
PSE – event was queued to the event queue on the agent

Also, the numbers you see in the file names are the priority, the agent instance ID and event ID, and the last one shows the order of NSEs.

Question: So, can we assume that these files can be copied and placed in the evtIbox folder and that the queue process will know what to do with them and process them?

Answer: No, these files are named this way only in the agent’s capture folder. This is purely for troubleshooting purposes so we could verifyt which events were sent, which were not sent, and in which order and which event was posted and was sent directly.