Topic
3 replies Latest Post - ‏2012-02-14T14:18:45Z by SystemAdmin
JoergZiegler
JoergZiegler
3 Posts
ACCEPTED ANSWER

Pinned topic Creating my own File Signature, how?

‏2012-01-12T12:00:21Z |
Hello,

I ve a question regarding File Signature in SwKBT and TAD4d.
I ve created my own file signature in SwKBT with the following steps
1.) Create a New Software Definition with Name QLiner, Manufactur BMC (formerly company was MQ Software ;-))
2.) Create a new Version 2 and a new release 2.1
3.) Add a File Signature with name attmanag and a size of 35528 and a Relevance to Recognition and OS Linux
I ve exported the knowledge base in canonical format an if I m looking into it I see my entry
<FileSignature guid="826bf3ee1a73400e8e206686500f0a55" dataInput="0" deleted="false" modified="2012-01-11T10:50:33.715" created="2012-01-11T10:50:33.715" confidenceLevel="2" discoveredItem="df82da96aa044283bf08d3f5c0696caf" platform="4" scope="RECOGNITION" operator="OR">
<file name="attmanag" size="35528"/>
</FileSignature>
I compare it against one signature coming out of the box in the IBM Standard catalog for IBM Tivoli Intelliwatch 6.00
<FileSignature guid="f45aeaf725244151a61044da4db938ab" externalId="ba42cd00e5df01dcbc46fa771091d950" dataInput="5" deleted="false" modified="2008-06-26T18:01:49.812" created="2008-02-28T09:29:57.968" confidenceLevel="2" discoveredItem="6a264c713ff4420b8921e71dfdbfca46" platform="4" scope="RECOGNITION" operator="OR">
<file name="portmapsv" size="171054"/>
And it looks a little bit similar.
But my signature is not generated in the local catalog for my Linux agent, the "portmapsv" is.
I ve no problems with Filter signatures coming from the unmatched entry view, the where correctly generated in
the local catalog for my Linux agent.

I ve tried to compare what I ve done against
http://publib.boulder.ibm.com/infocenter/tamit/v7r2m2/topic/com.ibm.adm.doc/com.ibm.signatures.doc/t_signatures_managingfilesignatures.html
but I don't find the missing part. So please any help is welcome
Thanks and best regards
Joerg
Updated on 2012-02-14T14:18:45Z at 2012-02-14T14:18:45Z by SystemAdmin
  • SystemAdmin
    SystemAdmin
    57 Posts
    ACCEPTED ANSWER

    Re: Creating my own File Signature, how?

    ‏2012-01-25T13:04:26Z  in response to JoergZiegler
    Hello Joerg,

    Note, that it takes some time between importing a Software Catalog to TAD4D server and propagating it to the agents.

    On the standard production configuration, it may take up to 30 hours

    Kind regards


    Krzysztof Pienkowski
    IBM employee
    TAD4D/LMT team
    Although I am an IBM employee, all views and opinions presented are my own.
    Please contact product support if you need IBM's official advice.
    • SystemAdmin
      SystemAdmin
      57 Posts
      ACCEPTED ANSWER

      Re: Creating my own File Signature, how?

      ‏2012-02-14T08:02:30Z  in response to SystemAdmin
      Hi Kris,
      is it possible to force propagatation?

      Kind Regards
      Oliver
      • SystemAdmin
        SystemAdmin
        57 Posts
        ACCEPTED ANSWER

        Re: Creating my own File Signature, how?

        ‏2012-02-14T14:18:45Z  in response to SystemAdmin
        Hi Oliver

        30-hour delay is caused by two factors
        1) After imporing the catalog on TAD4D server it has to be processed and converted to a format that is sent to the agents. This job is done by a periodic task started every 24 hours. This task is started also after every restart of TAD4D server

        2) Time required for the agents to connected to TAD4D server and download configuration and the catalog. On the production configuration, the agents download the parameters every 6 hours

        There are following ways of limiting the propagation delay

        1) Catalog processing delay. The following options are available
        a) Restart TAD4D server after importing the catalog. The catalog will be processed just after the restart
        b) Increase frequency of the catalog processing task (see catalogBuilderPeriod server parameter). Note, that it may impact TAD4D server performance

        2) Agent catalog download delay. Generally it is not possible to force the agent to download the catalog. The delay may be reduced by increasing the frequency of the agent check-ins (see down_parms_period agent parameter). Note, that it may impact TAD4D server performance

        Kind regards



        Krzysztof Pienkowski
        IBM employee
        TAD4D/LMT team
        Although I am an IBM employee, all views and opinions presented are my own.
        Please contact product support if you need IBM's official advice.