SKOOR Windows Agent Configuration
Configuration
All runtime configuration settings needed by the SKOOR collector are contained in the file eRangerAgent.ini. There are no other configuration options in the registry (besides the registration of the program itself in Windows). Copying the eRangerAgent.ini file from one WinAgent to another one is enough to replicate all configuration settings.
The configuration file must be kept in the same directory as the executables.
WinAgent can also be started without any configuration file at all. Default values (as with a new installation) will be used in this case.
WinAgent GUI configuration
The easiest way to configure the SKOOR WinAgent is to use the Windows GUI. Click on the configuration button in the tool bar or choose “Configuration…” from the file menu.
The names in italic at the end of the option descriptions underneath are the names used in the configuration file eRangerAgent.ini.
Network settings
Setting | Description |
---|---|
Listen on port | Port on which the WinAgent listens for incoming connections (52998 by default) |
Username | If a username is specified, this username is used for authentication. This means that the SKOOR collector must pass valid credentials to successfully make requests to the agent. |
Password | Password used for authentication |
SSL | If this option is set, the communication is encrypted with ssl |
Keep-alive | If this option is set, TCP connections from the collector are not disconnected after the request has been received by the agent. The agent can reuse the same TCP connection for many requests. If the connection is broken, the agent opens a new connection without losing data. |
Authorized hosts
Only SKOOR collectors (hosts) with IPs in this list are allowed to connect. If this list is empty, all IPs are allowed to connect.
authorized_host (multiple values possible)
Log settings
These settings configure the logging of the eRanger service.
Setting | Description |
---|---|
Write logfile | Enables/disables logging |
Logfile path | Path of the logfile. If WinAgent does not run as a service, the user that runs the WinAgent must have permission to write to this location (which is not always the case for the default C:\Program Files\Junisphere… path). |
Loglevel | Sets the log level (Debug > Info > Warning > Error) |
Truncate at size | If the file grows larger then this value, the file is truncated. |
Filetransfer options
This tab sets the permissions to send (Agent fetchfile) and receive (Agent putfile) files to/from the agent.
Setting | Description |
---|---|
Allow files to be received | Files can be received with Client Putfile jobs |
Allowed targets | Files received from agents can be stored to these target locations. The wildcard characters * and ? can be used. |
Allow files to be sent | Files can be sent with Client Fetchfile jobs. |
File allowed to be sent | Files from these locations can be fetched by the agent. The wildcards characters * and ? can be used. |
Do not forget to add an entry to the list with the button.
If you try to get or put a file which is not in the list or if sending/receiving functionality is disabled completely, an error message will be sent to the agent and displayed within SKOOR.
Run programs
These settings control if and which programs can be executed on the agent.
Setting | Description |
---|---|
Allow to run programs | Enable this option to allow programs to be run. |
Programs allowed | Programs in this list are allowed to be executed by the agent. The wildcard characters * and ? can be used. |
Local Windows User | If WinAgent runs as a service, all programs are executed under this Windows user. The username can be given in UPN format if it must contain the domain part (user@domain). If the username is left empty, the programs are executed in the context of the service-owner, the WinAgent is running on. This is normally the LocalSystem account. Applications that use a GUI may not work as expected (see also chapter 5.2). |
Password | Password for the user. The password is stored in encrypted form in the configuration file. |
Default Process timeout | Started processes will be killed after the given timeout (in seconds) if they are still running. This value can be overridden by setting a timeout value in the execute job. |
Do not forget to add an entry to the list with the button.
If you try to execute a program which is not in the list or if the execution is disabled completely, an error message will be sent to the agent and displayed in SKOOR.
Service and Autorun control
This tab allows to install, uninstall and start/stop the SKOOR collector service. All these operations can also be done in the service control (see chapter 3). WinAgent must be started as Administrator to be able to control the service.
If the Start the eRanger WinAgent after login (all users) checkbox is checked, WinAgent.exe is registered as an autorun program for all users in the registry under:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
This option is visible if the WinAgent has been installed for all users and has been started as an Administrator. If the WinAgent is started as a normal User, the check box is labelled with Start the eRangerWinAgent after login (current user). If it is selected, the WinAgent is registered as an autorun program under:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
With both options, the WinAgent is then started at login and run in the background.
Issues
Administrator privileges
The SKOOR WinAgent needs administrator privileges to read all performance data from the operating system (e.g. to see all processes from all users etc.). If reliable monitoring data shall be collected and the client cannot be started as a service (which is recommended for this use case) the user has to start the WinAgent as an administrator (right click – Run as administrator).
If the client is installed as a service, WinAgent must be started as an administrator to be able to control the service. Use the built-in Windows service control otherwise.
If the app is installed for all users in C:\Program Files\Junisphere, a normal user cannot change the configuration because he has no permission to write to the file C:\Program Files\Junisphere\eRangerAgent.ini). To be able to edit the configuration, WinAgent has to be started as an administrator.
Starting GUI applications from the agent
Services are not allowed to use the graphical user interface in Windows. If GUI applications (like EEM robot scripts) shall be started by the SKOOR WinAgent on Windows, the agent must be started as a normal application and not as a service. To be sure that the WinAgent runs as an application, uninstall the service (if it is installed).