About application metering start, stop, and denial events
Inventory Solution provides the application metering policy option Record usage events. This option lets you track the usage events of the applications that are defined in the policy.
When the Record usage events option is enabled, and a user of a managed computer starts or stops a monitored application, an event is generated. When a user tries to use an application whose monitoring policy denies its use, a denial event is generated. Every start event has a stop event or becomes a denial event. After the events are sent to the Configuration Management Database (CMDB), you can generate reports to view this data.
The Application Metering Plug-in sends the events to the CMDB in a batch at a specified interval.
The event data is very small, such as a few thousand bytes. If the Symantec Management Agent cannot connect to the CMDB, the managed computer saves the information locally and sends it later.
If a managed computer terminates abnormally, then the next time it starts, the Application Metering Plug-in does the following functions:
Determines which applications were running when the computer was terminated
Generates the appropriate stop events
Application metering records a variety of application events.
When you view a managed computer in the Resource Manager, you can view application metering start and stop events data by clicking View > Events, and then expanding Data Classes > Inventory > Application metering.
Table: Application metering start events data
Resource guid that is generated by using various attributes of a file. For example, its internal name, manufacturer, version etc.
Resource guid that is generated for a specific user on a domain.
Process ID of the application.
Name of the application metering policy.
Date and time of the event.
9/03/2004 9:51:18 A.M.
The GUID of the policy that caused the event to be generated.
The command-line options that are used to start the application.
Specifies whether this event is a denial event.
0 = not a denial event
1 = denial event
Path to the application file on the managed computer.
Time Total amount of time in seconds that the application was used during the monitoring period .
When the application is monitored, this value is updated every 30 seconds.
Maximum amount of memory in bytes used by the application during the monitoring period. When the application is monitored, this value is updated every 30 seconds.
Average CPU usage by the application during the monitoring period, where 100 equals 100 percent usage. When the application is monitored, this value is updated every 30 seconds. This information is not available from the managed computers that are running Windows 9x/Me.
Imported Document ID: HOWTO63533
Subscribing will provide email updates when this Article is updated. Login is required.