"Logged in Users" grows and grows and ...

[sammy2ooo]

Hi every1

i am running 3x W2k Terminalservers with Citrix. And while watching the "Logged in user" sensor, I have recognized that the number of loggend in users rises. But the citrix management console only shows about 30 logged in users...

Anyone?

Cheersen

[BSOD2600]

Did you select the data source as a counter instead of gauge?

[sammy2ooo]

Thx for your reply. No, the data source is selected as a gauge. I have also tried to query those hosts with snmpwalk with the oid .1.3.6.1.2.1.25.1.5.0 and the received values seems to match the ones cacti graphs.

But the received data still doesnt match the really logged in users...

Anyone?

[BSOD2600]

That OID is for, "The number of user sessions for which this host is storing state information. A session is a collection of processes requiring a single act of user authentication and possibly subject to collective job control."

Maybe you truly do have that many users accessing resources on that server, not all which are logged on.

[sheol]

I have the same issue with a Windows workstation in a Novell environment and am getting no response in another thread in the general section.

I'd really appreciate some help with this and have attached a graph with the last 3 days of data. Using snmpwalk for the oid gets the same results, you'll note in the graph that today's value is 2:

snmpwalk x.x.x. -v 1 -c string -Ci .1.3.6.1.2.1.25.1.5.0
HOST-RESOURCES-MIB::hrSystemNumUsers.0 = Gauge32: 2

I just went out, logged into the machine then logged out and now:

snmpwalk x.x.x.x -v 1 -c string -Ci .1.3.6.1.2.1.25.1.5.0
HOST-RESOURCES-MIB::hrSystemNumUsers.0 = Gauge32: 3

The drop in the graph values are when the machine is powered off overnight.

[BSOD2600]

If hrSystemNumUsers is continuously increasing (verified via snmpwalk), then its some bug with windows/snmp agent and not Cacti.

Your server does not have that many users log on each day, which Windows apparently continues to store info about?

[sheol]

Thanks for the reply. This isn't a server, it's an XP Professional workstation in a lab, only one user can log into it at a time, what it seems to be doing is counting how many times someone has logged into the box. What I was expecting was it to report the logon state, 1 for a user is currently logged in, 0 for no user is currently logged in.

[tymbow]

I don't think it works properly - at least not the way people want. Most people seem to want to know how many currently "logged in" console or RDP sessions there are in total at that instant. In Windows hrSystemNumUsers appears to include all sessions including NETWORK SERVICE and/or SYSTEM. I think I read somewhere ages ago (it may have been MSDN) that it will typically always be at least 2 even if no one is "logged on". I've wondered if maybe it also includes sessions that were unable to unload the registry (the stupid USERENV 1517 message in the Application event log).

As an example, my Windows Server 2003 box with no one "logged on" shows this counter consistently as 12. This must include sessions running as SYSTEM, NETWORK SERVICE in addition to service account such as for SQL Server. After logging in to the local console this jumps to 14.

[sheol]

If this is the case, and it certainly appears to be so for me at least, does anyone know of any other OID that can be queried or some other method to find out just if a user is logged in on the workstation? I don't need to know anything about them at all, I just need to know if the workstation is in use or not.