Classify and Discover iTunes running on a Window Server

Govindarajan
Mega Contributor

SCENARIO:

Cloud Dimensions needs to identify iTunes applications running on Windows systems. In order to create a list of approved/unauthorized applications, it is necessary to be able to classify applications successfully during the discovery process.

REQUIREMENT:

As the Cloud Dimensions Discovery administrator, you are tasked with classifying iTunes and successfully discovering the application running on your Windows MID server.

Verify iTunes is running on your MID Server by launching iTunes64Setup.exe under C:\TrainingResources

Create a Process Classification for iTunes (itunes)
Run Discovery against your MID server and verify iTunes was classified successfully.

i need solution for this stimulator task.

thanks

1 ACCEPTED SOLUTION

Steele Smith
Tera Guru

Okay, I just restarted the simulator so I could try instead of from memory.  I was able to complete both section 6 and section 10.  I'll post my screenshots of what I did.

 

Essentially completing step 10 definitely will do this. Note: I did restart the mid server as a just in case.  Can't say if it would be required but since I did it, I'd recommend it.

find_real_file.png

First I setup the Process Classification, (you can't add the Pattern to the HorizonalDiscoveryProbe yet, but remember you need to go back to add it in.

Then create a pattern called 'iTunes'

find_real_file.png

Standard pattern, I just made sure the OS was Windows and the entry points were entered as listed.  Make sure Enforce Process Classification is checked.

 

Going into the Identification section I did the following.  To keep it easy I didn't do anything fancy and just opted for simple set parameters after the initial WMI query.

find_real_file.png

Here's what I did within each of the other steps.

find_real_file.png

find_real_file.png

find_real_file.png

find_real_file.png

find_real_file.png

Hit Save and Publish

I went back to the process Classifier and added the iTunes pattern to the horizontal pattern.

 

Then I jumped to MidServers and synched the pattern.  Once that finished (less than a second) I just preemptively restarted the MidServer.

 

Then I went to Discovery Schedules and ran a quick discovery agains my mid server.

 

find_real_file.png

If everything was correct, you should see it running the pattern for iTunes. 

I checked the Application table searching for iTunes to make sure it was created, then I opened the computer system record and checked that the app was related to the server.  

I validated Step 10, then jumped back to Step 6 and validate it.  

 

find_real_file.png

Hope this helps to get Step 6 validated. 

View solution in original post

19 REPLIES 19

Surbhi1692
Kilo Explorer

Even for my instance it is not accepting solution.

Although my solution is correct.

 

Try updating the name of the CI.  When I did it I matched it exactly and it passed me through.  Thinking maybe remove the (itunes) part in the name.  

Steele Smith
Tera Guru

Okay, I just restarted the simulator so I could try instead of from memory.  I was able to complete both section 6 and section 10.  I'll post my screenshots of what I did.

 

Essentially completing step 10 definitely will do this. Note: I did restart the mid server as a just in case.  Can't say if it would be required but since I did it, I'd recommend it.

find_real_file.png

First I setup the Process Classification, (you can't add the Pattern to the HorizonalDiscoveryProbe yet, but remember you need to go back to add it in.

Then create a pattern called 'iTunes'

find_real_file.png

Standard pattern, I just made sure the OS was Windows and the entry points were entered as listed.  Make sure Enforce Process Classification is checked.

 

Going into the Identification section I did the following.  To keep it easy I didn't do anything fancy and just opted for simple set parameters after the initial WMI query.

find_real_file.png

Here's what I did within each of the other steps.

find_real_file.png

find_real_file.png

find_real_file.png

find_real_file.png

find_real_file.png

Hit Save and Publish

I went back to the process Classifier and added the iTunes pattern to the horizontal pattern.

 

Then I jumped to MidServers and synched the pattern.  Once that finished (less than a second) I just preemptively restarted the MidServer.

 

Then I went to Discovery Schedules and ran a quick discovery agains my mid server.

 

find_real_file.png

If everything was correct, you should see it running the pattern for iTunes. 

I checked the Application table searching for iTunes to make sure it was created, then I opened the computer system record and checked that the app was related to the server.  

I validated Step 10, then jumped back to Step 6 and validate it.  

 

find_real_file.png

Hope this helps to get Step 6 validated. 

thanks thanks for the solution sir..it worked

could u please give procedure step for task 9 .. im getting partial validation for the task 9..

REQUIREMENT:

 

As the Cloud Dimensions Discovery Administrator, you are tasked with extending the Windows OS - Servers pattern, using your knowledge and skills. Some guidance is provided below:

 

Using IP 198.51.100.176, extend the Windows OS - Servers pattern as follows:
Create a pattern extension called Custom Steps

 

Step 1 called Time Zone
Operation WMI Query
Namespace = "\root\CIMV2"
Tables and Fields: Use this website to determine the correct Table and Field entries 
https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/win32-timezone

 

Step 2 called Trim Time Zone
Operation = Parse Variable
Use https://regex101.com/ for parsing strategy assistance
Run Discovery against 198.51.100.176 and verify the Time Zone field is populated 

Sure, I'll update that later today.  Need to finish a bunch of Stories for work first. 🙂