I ran discovery, and received error Failed exploring CI Pattern. Check Pattern MSSQL DB on Windows Pattern. any insights to resolve the issue
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-22-2018 01:46 PM
I ran discovery, and received error Failed exploring CI Pattern. Check Pattern MSSQL DB on Windows Pattern. any insights to resolve the issue.
2018-03-23 08:56:45: Task is running on MID server MidServer_01
2018-03-23 08:56:45: setAttribute(samp_client_access,[{}])
2018-03-23 08:56:45: setAttribute(cmdb_ci_db_mssql_instance,[{}])
2018-03-23 08:56:45: setAttribute(cmdb_ci_db_mssql_database,[{}])
2018-03-23 08:56:45: setAttribute(cmdb_ci_db_mssql_instance,[{}])
2018-03-23 08:56:45: setAttribute(cmdb_ci_db_mssql_database,[{}])
Pre Pattern Execution
2018-03-23 08:56:45: Getting pre pattern execution data generated by script.
2018-03-23 08:56:45: setAttribute(SAM_installed,true)
Selecting Pattern for Execution
2018-03-23 08:56:45: Pattern: MSSql DB On Windows Pattern
2018-03-23 08:56:45: setAttribute(pattern,MSSql DB On Windows Pattern)
Process Detection
2018-03-23 08:56:45: Executing WMI query on host 129.120.209.76 query: Select * From Win32_Process WHERE (ProcessId = 1504)
2018-03-23 08:56:46: Query result: internal_namespace=root\cimv2 internal_classname=Win32_Process PeakPageFileUsage=560736 Handle=1504 CSName=GABVMLYNCDIR02 CSCreationClassName=Win32_ComputerSystem WriteTransferCount=11696781591 Caption=sqlservr.exe SessionId=0 QuotaNonPagedPoolUsage=62 ReadOperationCount=8811073 ThreadCount=52 PrivatePageCount=571568128 OSCreationClassName=Win32_OperatingSystem ParentProcessId=540 Priority=8 PageFaults=183321 OtherTransferCount=137816 ReadTransferCount=3722262101 PeakWorkingSetSize=478488 ProcessId=1504 objectReference=b12d5bb9-961d-4938-9c8b-1ca946045782 WindowsVersion=6.2.9200 PeakVirtualSize=5605724160 VirtualSize=5590921216 WorkingSetSize=489820160 Name=sqlservr.exe QuotaPeakNonPagedPoolUsage=91 Description=sqlservr.exe CreationDate=20180303205832.453461-360 QuotaPagedPoolUsage=495 PageFileUsage=558172 CreationClassName=Win32_Process QuotaPeakPagedPoolUsage=504 OtherOperationCount=172937 HandleCount=747 KernelModeTime=2021304957 UserModeTime=63488974978 WriteOperationCount=9279166 OSName=Microsoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2
2018-03-23 08:56:46: Executing WMI query on host 129.120.209.76 query: Select AddressWidth from Win32_Processor
2018-03-23 08:56:46: Query result: internal_namespace= internal_classname=Win32_Processor AddressWidth=64 objectReference=1fddfe53-0ee6-4c0d-97c9-f281d5abfed8
2018-03-23 08:56:46: Put file on Windows host 129.120.209.76 filePath: 64/msvcp100.dll
2018-03-23 08:59:36: Put file on Windows host 129.120.209.76:129.120.209.76 failed. filePath: 64/msvcp100.dll error: Unable to execute command. None of the command implementations was succesfull. Command NeebulaWMI.PutFileUsingAdminShare failed. System.Exception: Failed to create connection. Unable to connect to \\129.120.209.76\c$. Error=53 at NeebulaWMI.PutFileUsingAdminShare.Run(WMIRequestContext ctx, String[] args) at NeebulaWMI.CommandRunner.Run(WMIRequestContext ctx, String[] args) Command NeebulaWMI.PutFileUsingHttpDownload failed. System.Exception: Unable to create remote process. command: "c:\temp\httputil.exe" /download/64/msvcp100.dll 10.156.6.34 8585 http "c:\temp\msvcp100.dll". Error code: Path not found (9) at NeebulaWMI.WmiUtils.ExecCommand(String commandLine, WMIRequestContext request, Int64 timeout, String currDir) at NeebulaWMI.PutFileUsingHttpDownload.Run(WMIRequestContext ctx, String[] args) at NeebulaWMI.CommandRunner.Run(WMIRequestContext ctx, String[] args)
2018-03-23 08:59:36: Failed to find process on port. Failed to put file 64/msvcp100.dll on host 129.120.209.76. Detailed error: Unable to execute command. None of the command implementations was succesfull. Command NeebulaWMI.PutFileUsingAdminShare failed. System.Exception: Failed to create connection. Unable to connect to \\129.120.209.76\c$. Error=53 at NeebulaWMI.PutFileUsingAdminShare.Run(WMIRequestContext ctx, String[] args) at NeebulaWMI.CommandRunner.Run(WMIRequestContext ctx, String[] args) Command NeebulaWMI.PutFileUsingHttpDownload failed. System.Exception: Unable to create remote process. command: "c:\temp\httputil.exe" /download/64/msvcp100.dll 10.156.6.34 8585 http "c:\temp\msvcp100.dll". Error code: Path not found (9) at NeebulaWMI.WmiUtils.ExecCommand(String commandLine, WMIRequestContext request, Int64 timeout, String currDir) at NeebulaWMI.PutFileUsingHttpDownload.Run(WMIRequestContext ctx, String[] args) at NeebulaWMI.CommandRunner.Run(WMIRequestContext ctx, String[] args)
check if we got port from entry point
2018-03-23 08:59:36: Execution time: 0 ms
list namespaces in SqlServer namespace
2018-03-23 08:59:36: Executing WMI query on host 129.120.209.76 query: SELECT Name FROM __NAMESPACE
2018-03-23 08:59:36: Query result: internal_namespace= internal_classname=__NAMESPACE objectReference=89a65e17-29a0-4da5-b9c6-84f24aa11401 Name=ServerEvents internal_namespace= internal_classname=__NAMESPACE objectReference=3f88af8a-5d57-4449-831c-eb8722d1cc9a Name=ComputerManagement11 internal_namespace= internal_classname=__NAMESPACE objectReference=3c70daa4-2347-4dd1-8e34-fda2d6946e3c Name=ComputerManagement12
2018-03-23 08:59:36: setAttribute(nms,[{internal_classname=__NAMESPACE, OBJECT_REFERENCE=89a65e17-29a0-4da5-b9c6-84f24aa11401, internal_namespace=, objectReference=89a65e17-29a0-4da5-b9c6-84f24aa11401, row_number=1, Name=ServerEvents}, {internal_classname=__NAMESPACE, OBJECT_REFERENCE=3f88af8a-5d57-4449-831c-eb8722d1cc9a, internal_namespace=, objectReference=3f88af8a-5d57-4449-831c-eb8722d1cc9a, row_number=2, Name=ComputerManagement11}, {internal_classname=__NAMESPACE, OBJECT_REFERENCE=3c70daa4-2347-4dd1-8e34-fda2d6946e3c, internal_namespace=, objectReference=3c70daa4-2347-4dd1-8e34-fda2d6946e3c, row_number=3, Name=ComputerManagement12}])
2018-03-23 08:59:36: Execution time: 62 ms
filter namespaces
2018-03-23 08:59:36: setAttribute(nms,[{internal_classname=__NAMESPACE, OBJECT_REFERENCE=3f88af8a-5d57-4449-831c-eb8722d1cc9a, internal_namespace=, objectReference=3f88af8a-5d57-4449-831c-eb8722d1cc9a, row_number=2, Name=ComputerManagement11}, {internal_classname=__NAMESPACE, OBJECT_REFERENCE=3c70daa4-2347-4dd1-8e34-fda2d6946e3c, internal_namespace=, objectReference=3c70daa4-2347-4dd1-8e34-fda2d6946e3c, row_number=3, Name=ComputerManagement12}])
2018-03-23 08:59:36: Execution time: 0 ms
verify at least one namespace exists
2018-03-23 08:59:36: Execution time: 0 ms
set namespace attr
2018-03-23 08:59:36: setAttribute(nm,\Root\Microsoft\SqlServer\ComputerManagement11)
2018-03-23 08:59:36: Execution time: 0 ms
parse instance name
2018-03-23 08:59:36: Execution time: 0 ms
get instance_name from WMI if empty
2018-03-23 08:59:36: Executing WMI query on host 129.120.209.76 query: SELECT ServiceName FROM SqlService WHERE State = 4 AND ServiceName like 'MSSQL$%' or ServiceName = 'MSSQLSERVER' or ServiceName = 'MSSQL$OFFICESERVERS'
2018-03-23 08:59:36: WMI query on host 129.120.209.76 failed. query: SELECT ServiceName FROM SqlService WHERE State = 4 AND ServiceName like 'MSSQL$%' or ServiceName = 'MSSQLSERVER' or ServiceName = 'MSSQL$OFFICESERVERS' error: Provider load failure
2018-03-23 08:59:36: Execution time: 32 ms
verify port is not empty
2018-03-23 08:59:36: Execution time: 0 ms
Payload Processing
2018-03-23 06:59:45:
Check Processing Success
2018-03-23 06:59:45: Identification Engine: Discovery status of pattern: MSSql DB On Windows Pattern is FAILURE.
- Labels:
-
Discovery
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-22-2018 05:56 PM
Hi,
It seems we have limited information to troubleshoot what happen during discovery. Did you check ecc queue log / pattern log for more information on the failure?
What is the version of MSSQL that you try to discover?
Regards,
Kar Meng
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-23-2018 09:00 AM
MSSql DB on Windows Pattern
2018-03-23 08:56:45: Task is running on MID server MidServer_01
2018-03-23 08:56:45: setAttribute(samp_client_access,[{}])
2018-03-23 08:56:45: setAttribute(cmdb_ci_db_mssql_instance,[{}])
2018-03-23 08:56:45: setAttribute(cmdb_ci_db_mssql_database,[{}])
2018-03-23 08:56:45: setAttribute(cmdb_ci_db_mssql_instance,[{}])
2018-03-23 08:56:45: setAttribute(cmdb_ci_db_mssql_database,[{}])
Pre Pattern Execution
2018-03-23 08:56:45: Getting pre pattern execution data generated by script.
2018-03-23 08:56:45: setAttribute(SAM_installed,true)
Selecting Pattern for Execution
2018-03-23 08:56:45: Pattern: MSSql DB On Windows Pattern
2018-03-23 08:56:45: setAttribute(pattern,MSSql DB On Windows Pattern)
Process Detection
2018-03-23 08:56:45: Executing WMI query on host 129.120.209.76 query: Select * From Win32_Process WHERE (ProcessId = 1504)
2018-03-23 08:56:46: Query result: internal_namespace=root\cimv2 internal_classname=Win32_Process PeakPageFileUsage=560736 Handle=1504 CSName=GABVMLYNCDIR02 CSCreationClassName=Win32_ComputerSystem WriteTransferCount=11696781591 Caption=sqlservr.exe SessionId=0 QuotaNonPagedPoolUsage=62 ReadOperationCount=8811073 ThreadCount=52 PrivatePageCount=571568128 OSCreationClassName=Win32_OperatingSystem ParentProcessId=540 Priority=8 PageFaults=183321 OtherTransferCount=137816 ReadTransferCount=3722262101 PeakWorkingSetSize=478488 ProcessId=1504 objectReference=b12d5bb9-961d-4938-9c8b-1ca946045782 WindowsVersion=6.2.9200 PeakVirtualSize=5605724160 VirtualSize=5590921216 WorkingSetSize=489820160 Name=sqlservr.exe QuotaPeakNonPagedPoolUsage=91 Description=sqlservr.exe CreationDate=20180303205832.453461-360 QuotaPagedPoolUsage=495 PageFileUsage=558172 CreationClassName=Win32_Process QuotaPeakPagedPoolUsage=504 OtherOperationCount=172937 HandleCount=747 KernelModeTime=2021304957 UserModeTime=63488974978 WriteOperationCount=9279166 OSName=Microsoft Windows Server 2012 Standard|C:\Windows|\Device\Harddisk0\Partition2
2018-03-23 08:56:46: Executing WMI query on host 129.120.209.76 query: Select AddressWidth from Win32_Processor
2018-03-23 08:56:46: Query result: internal_namespace= internal_classname=Win32_Processor AddressWidth=64 objectReference=1fddfe53-0ee6-4c0d-97c9-f281d5abfed8
2018-03-23 08:56:46: Put file on Windows host 129.120.209.76 filePath: 64/msvcp100.dll
2018-03-23 08:59:36: Put file on Windows host 129.120.209.76:129.120.209.76 failed. filePath: 64/msvcp100.dll error: Unable to execute command. None of the command implementations was succesfull. Command NeebulaWMI.PutFileUsingAdminShare failed. System.Exception: Failed to create connection. Unable to connect to \\129.120.209.76\c$. Error=53 at NeebulaWMI.PutFileUsingAdminShare.Run(WMIRequestContext ctx, String[] args) at NeebulaWMI.CommandRunner.Run(WMIRequestContext ctx, String[] args) Command NeebulaWMI.PutFileUsingHttpDownload failed. System.Exception: Unable to create remote process. command: "c:\temp\httputil.exe" /download/64/msvcp100.dll 10.156.6.34 8585 http "c:\temp\msvcp100.dll". Error code: Path not found (9) at NeebulaWMI.WmiUtils.ExecCommand(String commandLine, WMIRequestContext request, Int64 timeout, String currDir) at NeebulaWMI.PutFileUsingHttpDownload.Run(WMIRequestContext ctx, String[] args) at NeebulaWMI.CommandRunner.Run(WMIRequestContext ctx, String[] args)
2018-03-23 08:59:36: Failed to find process on port. Failed to put file 64/msvcp100.dll on host 129.120.209.76. Detailed error: Unable to execute command. None of the command implementations was succesfull. Command NeebulaWMI.PutFileUsingAdminShare failed. System.Exception: Failed to create connection. Unable to connect to \\129.120.209.76\c$. Error=53 at NeebulaWMI.PutFileUsingAdminShare.Run(WMIRequestContext ctx, String[] args) at NeebulaWMI.CommandRunner.Run(WMIRequestContext ctx, String[] args) Command NeebulaWMI.PutFileUsingHttpDownload failed. System.Exception: Unable to create remote process. command: "c:\temp\httputil.exe" /download/64/msvcp100.dll 10.156.6.34 8585 http "c:\temp\msvcp100.dll". Error code: Path not found (9) at NeebulaWMI.WmiUtils.ExecCommand(String commandLine, WMIRequestContext request, Int64 timeout, String currDir) at NeebulaWMI.PutFileUsingHttpDownload.Run(WMIRequestContext ctx, String[] args) at NeebulaWMI.CommandRunner.Run(WMIRequestContext ctx, String[] args)
check if we got port from entry point
2018-03-23 08:59:36: Execution time: 0 ms
list namespaces in SqlServer namespace
2018-03-23 08:59:36: Executing WMI query on host 129.120.209.76 query: SELECT Name FROM __NAMESPACE
2018-03-23 08:59:36: Query result: internal_namespace= internal_classname=__NAMESPACE objectReference=89a65e17-29a0-4da5-b9c6-84f24aa11401 Name=ServerEvents internal_namespace= internal_classname=__NAMESPACE objectReference=3f88af8a-5d57-4449-831c-eb8722d1cc9a Name=ComputerManagement11 internal_namespace= internal_classname=__NAMESPACE objectReference=3c70daa4-2347-4dd1-8e34-fda2d6946e3c Name=ComputerManagement12
2018-03-23 08:59:36: setAttribute(nms,[{internal_classname=__NAMESPACE, OBJECT_REFERENCE=89a65e17-29a0-4da5-b9c6-84f24aa11401, internal_namespace=, objectReference=89a65e17-29a0-4da5-b9c6-84f24aa11401, row_number=1, Name=ServerEvents}, {internal_classname=__NAMESPACE, OBJECT_REFERENCE=3f88af8a-5d57-4449-831c-eb8722d1cc9a, internal_namespace=, objectReference=3f88af8a-5d57-4449-831c-eb8722d1cc9a, row_number=2, Name=ComputerManagement11}, {internal_classname=__NAMESPACE, OBJECT_REFERENCE=3c70daa4-2347-4dd1-8e34-fda2d6946e3c, internal_namespace=, objectReference=3c70daa4-2347-4dd1-8e34-fda2d6946e3c, row_number=3, Name=ComputerManagement12}])
2018-03-23 08:59:36: Execution time: 62 ms
filter namespaces
2018-03-23 08:59:36: setAttribute(nms,[{internal_classname=__NAMESPACE, OBJECT_REFERENCE=3f88af8a-5d57-4449-831c-eb8722d1cc9a, internal_namespace=, objectReference=3f88af8a-5d57-4449-831c-eb8722d1cc9a, row_number=2, Name=ComputerManagement11}, {internal_classname=__NAMESPACE, OBJECT_REFERENCE=3c70daa4-2347-4dd1-8e34-fda2d6946e3c, internal_namespace=, objectReference=3c70daa4-2347-4dd1-8e34-fda2d6946e3c, row_number=3, Name=ComputerManagement12}])
2018-03-23 08:59:36: Execution time: 0 ms
verify at least one namespace exists
2018-03-23 08:59:36: Execution time: 0 ms
set namespace attr
2018-03-23 08:59:36: setAttribute(nm,\Root\Microsoft\SqlServer\ComputerManagement11)
2018-03-23 08:59:36: Execution time: 0 ms
parse instance name
2018-03-23 08:59:36: Execution time: 0 ms
get instance_name from WMI if empty
2018-03-23 08:59:36: Executing WMI query on host 129.120.209.76 query: SELECT ServiceName FROM SqlService WHERE State = 4 AND ServiceName like 'MSSQL$%' or ServiceName = 'MSSQLSERVER' or ServiceName = 'MSSQL$OFFICESERVERS'
2018-03-23 08:59:36: WMI query on host 129.120.209.76 failed. query: SELECT ServiceName FROM SqlService WHERE State = 4 AND ServiceName like 'MSSQL$%' or ServiceName = 'MSSQLSERVER' or ServiceName = 'MSSQL$OFFICESERVERS' error: Provider load failure
2018-03-23 08:59:36: Execution time: 32 ms
verify port is not empty
2018-03-23 08:59:36: Execution time: 0 ms
Payload Processing
2018-03-23 06:59:45:
Check Processing Success
2018-03-23 06:59:45: Identification Engine: Discovery status of pattern: MSSql DB On Windows Pattern is FAILURE.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-23-2018 09:00 AM
below is what iam getting back