Hello Betty,

I understand the help will be limited, but I do appreciate the effort you guys are making! Believe me - I cannot wait until I can complete a working demo for management so we can renew support again.

Yes you are correct - I believe the issue lays with the Patrol configuration (possibly my monitoring policies as well).

It seems like the Patrol agent fatally exits immediately every time I start it. The logs don't reveal much other than cannot access Performance Counters...

I also tried installing a Linux-based Patrol agent and got a little more info in the error logs:

Fri Feb 15 12:38:29 2019: ID 10218c: I: Enabling COS support subsystem using RT Server Locator: tcp:localhost:2059.

Fri Feb 15 12:38:29 2019: ID 102010: I: Binding PatrolAgent to TCP port 3181

Fri Feb 15 12:38:29 PM 2019: ID 1021d3: I: PatrolAgent default account is 'bmcadmin'

Fri Feb 15 12:38:29 PM 2019: Discarding Invalid Events Cache

Fri Feb 15 12:38:29 PM 2019: Discarding Invalid Stats Cache

Fri Feb 15 12:38:29 PM 2019: ID 1021f9: I: Enabling Integration Service support subsystem

Fri Feb 15 12:38:29 PM 2019: ID 1020a5: I: ALL_COMPUTERS km not found, using default all_defaults

Fri Feb 15 12:38:29 PM 2019: ID 102082: I: PatrolAgent-Info: Loaded `Linux' application locally from agent knowledge directory.

Fri Feb 15 12:38:29 PM 2019: KMs won't be loaded from PATROL Console. Agent configure to load only Preload KM List.

Fri Feb 15 12:38:29 PM 2019: ID 1021fe: I: Changing working directory to default account home directory - '/home/bmcadmin'

Fri Feb 15 12:38:29 PM 2019: ID 1020a9: I: Using default method of collecting process cache: internal function call.

Fri Feb 15 12:38:29 PM 2019: ID 1020ab: I: PatrolAgent's runqSchedPolicy is now set to 1.

Fri Feb 15 12:38:29 PM 2019: ID 10205a: I: Binding PatrolAgent to port 3181 ...

Fri Feb 15 12:38:29 PM 2019: ID 10212e: E: ERROR: initialiseCosSubsystem() - createServer() - tcp:localhost:2059

Fri Feb 15 12:49:24 PM 2019: Failed to connect Integration Service 'TSIM.COMPANY.CA' on port '12124'.

Hello Betty,

Yes!! Thanks so much this helped!

I checked the registry key and it seems the keys were indeed missing. I have added "Counter" and "Help" with copied values from another server and that seems to have fixed the fatal crash the agent was having!

Agent is now running, but still cannot see in TSPS. Regardless, very excited we progressed a step today. Thanks Betty

I believe the next step would be to troubleshoot the connection between the agent and the infrastructure/presentation server. What would help here, logs from the Windows Patrol agent?

Hello Betty,

Thanks again for your replies The Agent is set up as following:

Package Solution Selection

Oracle JRE - Windows

PATROL Agent for Windows

VMware vSphere

Installation Directory

C:\Program Files\BMC Software

Patrol 3.x Product Directory

C:\Program Files\BMC Software

Patrol3

Patrol Default Account Properties

bmcadmin (account created on target node + given administrative privileges)

Level of Security

Basic (default)

No Overwrite

Patrol Agent Port #

3183 + Start agent automatically after installation is complete

Integration Service Config

tcp:tsim.company.ca:12124

Cell Config

left all default (encryption key: mc, primary and secondary cell left blank)

RTSERVERS

Left blank

Auto-Add Selected Components to Firewall Exception List

I can confirm that the agent is not successfully establishing a connection with the integration service server, as the logs on the patrol agent side reveal:

Wed Mar 06 11:29:10 2019: PatrolAgent (V11.3.01i, Microsoft Windows AMD64, Build_20180514073748 May 14 2018)

PID 9276 started at Wed Mar  6 11:29:10 2019

Wed Mar 06 11:29:10 2019: EPOCH TIME = 1551889750

Wed Mar 06 11:29:10 2019: Host RHLON01VCDEV01 Microsoft Windows rhlon01vcdev01 6.1 7601-1 AMD64/6(4MP)

Wed Mar 06 11:29:10 2019: BUILDENV = Microsoft Windows AMD64

Wed Mar 06 11:29:10 2019: Build TARGET = Windows_NT-AMD64

Wed Mar 06 11:29:10 2019: Run Time $TARGET = Windows_NT-AMD64

Wed Mar 06 11:29:10 2019: ID 10218a: I: Internationalized PatrolAgent, Locale = C (C).

Wed Mar 06 11:29:10 2019: ID 102192: I: Max. # of open file descriptors = 1024

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: ALLUSERSPROFILE=C:\ProgramData

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: APPDATA=C:\Windows\system32\config\systemprofile\AppData\Roaming

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: CommonProgramFiles=C:\Program Files\Common Files

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: CommonProgramW6432=C:\Program Files\Common Files

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: COMPUTERNAME=RHLON01VCDEV01

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: COMSPEC=C:\Windows\system32\cmd.exe

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: FP_NO_HOST_CHECK=NO

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: LOCALAPPDATA=C:\Windows\system32\config\systemprofile\AppData\Local

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: NUMBER_OF_PROCESSORS=4

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: OS=Windows_NT

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: OvAgentDir=C:\ProgramData\HP\HP BTO Software\

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: OVCSL_LOG=TRUE

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: OVCSL_LOG_APPLICATION=HPOvPerlA

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: OVCSL_LOG_FILE=%OVCSL_USER_TMP%\HPOvPerlA-install.log

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: OvDataDir=C:\ProgramData\HP\HP BTO Software\

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: OvInstallDir=C:\Program Files\HP\HP BTO Software\

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: OVPERLLIB=C:\Program Files\HP\HP BTO Software\nonOV\Perl\a\lib

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PATH=C:\Program Files\HP\NCU;C:\Program Files (x86)\VMware\VMware vSphere CLI\Perl\site\bin;C:\Program Files (x86)\VMware\VMware vSphere CLI\Perl\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Common Files\Hewlett-Packard\HPOvLIC\lib;c:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\HP\HP BTO Software\bin;C:\Program Files\HP\HP BTO Software\bin\win64;C:\Program Files\HP\HP BTO Software\bin\win64\OpC;C:\Program Files (x86)\Microsoft SQL Server\90\Tools\binn\;C:\Program Files\Microsoft Data Protection Manager\DPM\bin\VDDK\bin\;C:\Program Files\PuTTY\;C:\PROGRA~1\BMCSOF~1\Patrol3\bin;C:\Program Files\BMC Software\Patrol3\bin\patrol_x86

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PATROL_HOME=C:\PROGRA~1\BMCSOF~1\Patrol3\

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PATROL_TEMP=C:\PROGRA~1\BMCSOF~1\Patrol3\tmp

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PROCESSOR_ARCHITECTURE=AMD64

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 23 Stepping 6, GenuineIntel

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PROCESSOR_LEVEL=6

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PROCESSOR_REVISION=1706

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: ProgramData=C:\ProgramData

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: ProgramFiles=C:\Program Files

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: ProgramFiles(x86)=C:\Program Files (x86)

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: ProgramW6432=C:\Program Files

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\;c:\Program Files\Microsoft Security Client\MpProvider\;C:\Program Files\Microsoft Monitoring Agent\Agent\PowerShell\

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PUBLIC=C:\Users\Public

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: SystemDrive=C:

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: SystemRoot=C:\Windows

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: TEMP=C:\Windows\TEMP

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: TMP=C:\Windows\TEMP

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: UATDATA=C:\Windows\CCM\UATData\D9F8C395-CAB8-491d-B8AC-179A1FE1BE77

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: USERDOMAIN=COMPANY

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: USERNAME=RHLON01VCDEV01$

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: USERPROFILE=C:\Windows\system32\config\systemprofile

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: windir=C:\Windows

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: TARGET=Windows_NT-AMD64

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PATROL_SKS_DBNAME=default

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PATROL_HEARTBEAT_INTERVAL=4000

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: PATROL_BIN=C:\PROGRA~1\BMCSOF~1\Patrol3\bin

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: XBMLANGPATH=C:\PROGRA~1\BMCSOF~1\Patrol3\lib\images/%B.xbm

Wed Mar 06 11:29:10 2019: ID 1020ff: I: Environment: ML_ROOT=C:\PROGRA~1\BMCSOF~1\Patrol3\lib\nls

Wed Mar 06 11:29:21 2019: Patrol Config Caching is enabled.

Wed Mar 06 11:29:21 2019: Patrol Host Domain Not Overridden

Wed Mar 06 11:29:21 2019: ID 10205f: I: Configuration successfully loaded "C:\PROGRA~1\BMCSOF~1\Patrol3\lib\rtserver.current"

Wed Mar 06 11:29:21 2019: ID 10205f: I: Configuration successfully loaded "C:\PROGRA~1\BMCSOF~1\Patrol3\lib\integrationservice.current"

Wed Mar 06 11:29:21 2019: ID 10205f: I: Configuration successfully loaded "C:\PROGRA~1\BMCSOF~1\Patrol3\lib\eventintegration.current"

Wed Mar 06 11:29:22 2019: ID 10205f: I: Configuration successfully loaded "C:\PROGRA~1\BMCSOF~1\Patrol3\lib\eventrules.current"

Wed Mar 06 11:29:22 2019: ID 10205f: I: Configuration successfully loaded "C:\PROGRA~1\BMCSOF~1\Patrol3\lib\eventidentification.current"

Wed Mar 06 11:29:22 2019: ID 10205f: I: Configuration successfully loaded "C:\PROGRA~1\BMCSOF~1\Patrol3\lib\CentralAdminTags.current"

Wed Mar 06 11:29:22 2019: ID 10218d: W: Not enabling COS support subsystem, no RT Server Locator found.

Wed Mar 06 11:29:22 2019: Value of lpCounterID index(8228) is > value of dwLastId(8112)(BuildNameTable.cpp:213)

Wed Mar 06 11:29:22 2019:  lpThisName is = `MSSQL$MICROSOFT##WID:Memory Broker Clerks`

Wed Mar 06 11:29:22 2019: Value of lpCounterID index(8230) is > value of dwLastId(8112)(BuildNameTable.cpp:213)

.... more performance counter info ...

Wed Mar 06 11:29:25 2019: ID 102010: I: Binding PatrolAgent to TCP port 3183

Wed Mar 06 11:29:26 2019: Discarding Invalid Events Cache

Wed Mar 06 11:29:26 2019: Discarding Invalid Stats Cache

Wed Mar 06 11:29:26 2019: ID 1021f9: I: Enabling Integration Service support subsystem

Wed Mar 06 11:29:26 2019: ID 1020a5: I: ALL_COMPUTERS km not found, using default all_defaults

Wed Mar 06 11:29:26 2019: ID 1020a5: I: NT km not found, using default NT

Wed Mar 06 11:29:26 2019: KMs won't be loaded from PATROL Console. Agent configure to load only Preload KM List.

Wed Mar 06 11:29:26 2019: ID 1021fe: I: Changing working directory to default account home directory - 'C:\PROGRA~1\BMCSOF~1\Patrol3\profile\bmcadmin'

Wed Mar 06 11:29:26 2019: ID 1020a9: I: Using default method of collecting process cache: internal function call.

Wed Mar 06 11:29:26 2019: ID 1020ab: I: PatrolAgent's runqSchedPolicy is now set to 1.

Wed Mar 06 11:29:26 2019: ID 102097: I: COM: com library initialize OK, COM security setting is W.

Wed Mar 06 11:29:26 2019: ID 10205a: I: Binding PatrolAgent to port 3183 ...

Wed Mar 06 11:40:20 2019: Failed to connect Integration Service 'TSIM.COMPANY.CA' on port '12124'.

Note that the output of "pconfig +get" states "Connection with 'RHLON01VCDEV01' at port 3181 has failed -- 100% complete."

Why is it trying to use port 3181? I configured it to use 3183 in the repository when building the agent package - and even the agent logs reveal that it is indeed binding the PatrolAgent to port 3183...

I checked the logs on the integration service node (same server as the TSIM server, using out of box integration service) and I see its denying connection requests from the rhlon01vcdev01 server, saying its already connected to another server (10.45.51.252, which is the IP address of the TSIM server itself):

INFO  03/06 15:47:45 Agent                [ISExecutor-131] 860005  PKG_OPS_CMDS_ACK message Sent Successfully to AC [messageId PA-0-10001-1551905265-11]

INFO  03/06 15:52:56 Agent                [AC_Listener] 102456 Agent received a connection request from /172.20.192.162

WARN  03/06 15:52:56 Agent                [AC_Listener] 102736 Agent denied the connection attempt from /172.20.192.162 as it is already connected to another server ( /10.45.51.252 ).

INFO  03/06 15:53:18 Agent                [AC_Listener] 102456 Agent received a connection request from /10.45.51.242

WARN  03/06 15:53:18 Agent                [AC_Listener] 102736 Agent denied the connection attempt from /10.45.51.242 as it is already connected to another server ( /10.45.51.252 ).

INFO  03/06 16:03:50 Agent                [AC_Listener] 102456 Agent received a connection request from /172.20.192.162

WARN  03/06 16:03:50 Agent                [AC_Listener] 102736 Agent denied the connection attempt from /172.20.192.162 as it is already connected to another server ( /10.45.51.252 ).

INFO  03/06 16:04:12 Agent                [AC_Listener] 102456 Agent received a connection request from /10.45.51.242

WARN  03/06 16:04:12 Agent                [AC_Listener] 102736 Agent denied the connection attempt from /10.45.51.242 as it is already connected to another server ( /10.45.51.252 ).

INFO  03/06 16:14:44 Agent                [AC_Listener] 102456 Agent received a connection request from /172.20.192.162

WARN  03/06 16:14:44 Agent                [AC_Listener] 102736 Agent denied the connection attempt from /172.20.192.162 as it is already connected to another server ( /10.45.51.252 ).

INFO  03/06 16:15:07 Agent                [AC_Listener] 102456 Agent received a connection request from /10.45.51.242

WARN  03/06 16:15:07 Agent                [AC_Listener] 102736 Agent denied the connection attempt from /10.45.51.242 as it is already connected to another server ( /10.45.51.252 ).

Hello Arif,

Thanks for your reply . I initially had it at 3183 and was told to set it to 12124 so i had it changed in the repository.

I tried creating a text file as you advised and running those commands to reload the configuration and restart the agent, however it seems like it still cannot connect. Additionally, I ran pconfig +get AFTER loading the new configuration and restarting, and it still returns "Connection with 'RHLON01VCDEV01' at port 3181 has failed -- 100% complete."

Hello Arif,

Sorry I should have been more clear, I did run the pconfig the way you specified but it didnt work, here is the console output:

PATROL_CONFIG

"/AgentSetup/Identification/Tags/TAG/WinOS" = { REPLACE = "Windows OS Monitoring" },

"/AgentSetup/Identification/Tags/TAG/vSphere" = { REPLACE = "VMware monitoring"},

"/AgentSetup/integration/denyCfg" = { REPLACE = "false" },

"/AgentSetup/integration/integrationServices" = { REPLACE = "tcp:tsim.company.ca:3183" },

"/AgentSetup/pemCloseStatus" = { REPLACE = "0" },

"/AgentSetup/pemStartEID" = { REPLACE = "7" },

"/AgentSetup/rtServers" = { REPLACE = "" },

"/EventSetup/Configuration/EventCells" = { REPLACE = "" },

"/EventSetup/Configuration/Format" = { REPLACE = "BiiP3" },

"/EventSetup/Configuration/ForwardEventsToIS" = { REPLACE = "yes" },

"/EventSetup/Configuration/Key" = { REPLACE = "mc" },

"/EventSetup/Format/BiiP3/catalogs/0/types/11/slots/msg" = { REPLACE = "%{PARAMETER_NAME} for %{APPCLASS}/%{APPINSTANCE} is in %{EVENT_TYPE} current value is %{PARAMETER_VALUE}" },

"/EventSetup/Format/BiiP3/catalogs/0/types/9/slots/msg" = { REPLACE = "%{PARAMETER_NAME} for %{APPCLASS}/%{APPINSTANCE} is now OK - current value is %{PARAMETER_VALUE}" },

"/EventSetup/Format/BiiP3/slots/event_identification_type" = { REPLACE = "Internal" }

The Patrol Agent log shows:

Wed Mar 06 16:47:27 2019: Failed to connect Integration Service 'TSIM.COMPANY.CA' on port '3183'.

Hello Arif,

1) Yes integration service is running on TSIM.COMPANY.CA - That is the out-of-box integration service available on the infrastructure server.

2) netstat -a | grep 3183     did not catch anything - doesnt seem to be listening? Unless my method to check is not correct

3) There is no firewall blocking the connection. In fact - a look at the "TrueSightAgent_TSIM.company.ca_12124_3183.log" on the TSIM server shows that it is receiving the connection request from the agent, but rejecting it for reasons unknown (says its already connected to another server.... but 10.45.51.252 is the TSIM servers IP itself)