Hi all how are you?
Team, i have about 100 servers that dont execute almost any action, they execute a few actions once in a while.
In the logs, i can see A LOT of reports, like:
At 22:41:44 -0400 -
Encrypted Report posted successfully
At 22:46:40 -0400 -
Encrypted Report posted successfully
At 22:51:43 -0400 -
Encrypted Report posted successfully
At 22:52:51 -0400 -
Encrypted Report posted successfully
At 22:56:41 -0400 -
Encrypted Report posted successfully
At 23:01:45 -0400 -
Encrypted Report posted successfully
At 23:06:41 -0400 -
Encrypted Report posted successfully
At 23:07:49 -0400 -
Encrypted Report posted successfully
At 23:11:44 -0400 -
Encrypted Report posted successfully
At 23:16:42 -0400 -
Encrypted Report posted successfully
At 23:21:46 -0400 -
Encrypted Report posted successfully
At 23:26:45 -0400 -
Encrypted Report posted successfully
At 23:31:43 -0400 -
Encrypted Report posted successfully
At 23:36:41 -0400 -
Encrypted Report posted successfully
At 23:37:49 -0400 -
Encrypted Report posted successfully
At 23:41:45 -0400 -
Encrypted Report posted successfully
At 23:46:45 -0400 -
Encrypted Report posted successfully
At 23:51:47 -0400 -
Encrypted Report posted successfully
I can see that the client receives the action, but to not execute it:
At 09:20:25 -0400 - mailboxsite (http://<ip_number>:52311/cgi-bin/bfgather.exe/mailboxsite10130389)
Downloaded ‘http://<ip_number>:52311/mailbox/files/49/2b/492b2eeb622735ae497531e923021a9ff723aa83’ as 'Action 650131.fxf’
Gather::SyncSiteByFile adding files - count: 1
At 09:20:25 -0400 -
Successful Synchronization with site ‘mailboxsite’ (version 129) - 'http://<ip_number>:52311/cgi-bin/bfgather.exe/mailboxsite10130389’
Processing action site.
At 09:20:25 -0400 - mailboxsite (http://<ip_number>:52311/cgi-bin/bfgather.exe/mailboxsite10130389)
Relevant - _Run Windows2012-CSD (fixlet:650131)
But for this example, action 650131, this is the only two mentions about it in the logs, the client got it, became relevant and that’s it, no execution.
Have you ever seen anything like this?
I know that if we enable CommandPolling with a interval too small on a client this situation can happen, but this is not the case, this clients does not use CommandPolling.
Other clients execute the actions normally, including the relays so i don’t think it is something related to the relays…
What do you think ?