Ask the Community
Groups
System Information Audit - Connect IT Community | Kaseya
<main> <article class="userContent"> <p><strong>System Audit information is retrieved using Windows WMI</strong></p> <p> </p> <p>Here's how to trace the System Audit:</p> <div> <p> </p> <ul><li>Make sure the System Audit script has run successfully.</li> </ul><p> </p> <p>>Agent >Agent Logs - select agent procedure log</p> <p> </p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/EX63S455YCTJ/3-7-2018-7-30-14-am.png" alt="3-7-2018_7-30-14_AM.png" class="embedImage-img importedEmbed-img"></img></p> <p> </p> <ul><li>Check to verify the kasmbios.txt is uploaded to \Kaseya\UserProfiles\<agent GUID>\Audit folder.</li> <li>Check to see if kasmbios.txt contains valid contents. </li> </ul><p> <img src="/attachments/token/bgVFloBnOBhkccieckaWi2MIZ/?name=Kasmbios.jpg" alt="Kasmbios.jpg" width="851" height="378" class="embedImage-img importedEmbed-img"></img></p> <p> </p> <p> </p> <p> </p> <p>Since the system audit data are processed on the server side, the plug-in processes these in a fixed time period of a couple minutes.</p> <p> </p> <ul><li>The audit data then will be inserted into auditRsltSmbios table.</li> </ul><p> </p> If there are errors found in the kasmbios.txt file then these are usually WMI errors which can be looked up on the Microsoft support sites. <p> </p> <p>In most cases you can always run WMIC from command prompt to retrieve the data to verify it is able to collect it.</p> <p> </p> <p> </p> </div> </article> </main>