Precondition:
- Setup agentd and agent2 on windows machine
Steps to reproduce:
- Create two hosts:
-) First host for agentd
-) Second host for agent2 - Create item for both hosts with key
wmi.getall["ROOT\Microsoft\Windows\Storage","Select * from __SystemClass"]
- Start agents and server
- collect data
- check provider parameters
Result: Agentd output:
[{"Name":"MS_406"},{"Name":"MS_426"},{"Name":"PT"},{"Name":"MS_414"},{"Name":"MS_809"},{"Name":"Providers_v2"},{"Name":"MS_419"},{"EventQueryList":["select * from MSFT_HealthActionEvent","select * from MSFT_StorageAlertEvent","select * from MSFT_StorageArrivalEvent","select * from MSFT_StorageDepartureEvent","select * from MSFT_StorageFaultEvent","select * from MSFT_StorageHealthStatusChangeEvent","select * from MSFT_StorageModificationEvent"],"provider":"\\\\\\\\.\\\\root\\\\Microsoft\\\\Windows\\\\Storage:__Win32Provider.Name=\\\"StorageWMI\\\""},{"CLSID":"{52C84ACA-027A-4536-A74A-E0BB50C44782}","HostingModel":"NetworkServiceHost","ImpersonationLevel":1,"InitializationReentrancy":0,"Name":"iSCSIWMIv2","PerLocaleInitialization":"False","PerUserInitialization":"False","Pure":"True","Version":1073741825},{"CLSID":"{B4A6821D-4D2E-40DD-9EE0-89C2CD07BF69}","HostingModel":"NetworkServiceHost","ImpersonationLevel":1,"InitializationReentrancy":0,"Name":"StorageWMI","PerLocaleInitialization":"False","PerUserInitialization":"False","Pure":"True","Version":1073741825},{"provider":"\\\\\\\\.\\\\root\\\\Microsoft\\\\Windows\\\\Storage:__Win32Provider.Name=\\\"iSCSIWMIv2\\\""},{"provider":"\\\\\\\\.\\\\root\\\\Microsoft\\\\Windows\\\\Storage:__Win32Provider.Name=\\\"StorageWMI\\\""},{"InteractionType":0,"provider":"\\\\\\\\.\\\\root\\\\Microsoft\\\\Windows\\\\Storage:__Win32Provider.Name=\\\"iSCSIWMIv2\\\"","QuerySupportLevels":["WQL:UnarySelect"],"SupportsDelete":"True","SupportsEnumeration":"True","SupportsGet":"True","SupportsPut":"True"},{"InteractionType":0,"provider":"\\\\\\\\.\\\\root\\\\Microsoft\\\\Windows\\\\Storage:__Win32Provider.Name=\\\"StorageWMI\\\"","QuerySupportLevels":["WQL:UnarySelect"],"SupportsDelete":"True","SupportsEnumeration":"True","SupportsGet":"True","SupportsPut":"True"}]
Agent2 output:
[{"Name":"MS_406"},{"Name":"MS_426"},{"Name":"PT"},{"Name":"MS_414"},{"Name":"MS_809"},{"Name":"Providers_v2"},{"Name":"MS_419"},{"provider":"\\\\.\\root\\Microsoft\\Windows\\Storage:__Win32Provider.Name=\"iSCSIWMIv2\""},{"provider":"\\\\.\\root\\Microsoft\\Windows\\Storage:__Win32Provider.Name=\"StorageWMI\""},{"EventQueryList":["select * from MSFT_HealthActionEvent","select * from MSFT_StorageAlertEvent","select * from MSFT_StorageArrivalEvent","select * from MSFT_StorageDepartureEvent","select * from MSFT_StorageFaultEvent","select * from MSFT_StorageHealthStatusChangeEvent","select * from MSFT_StorageModificationEvent"],"provider":"\\\\.\\root\\Microsoft\\Windows\\Storage:__Win32Provider.Name=\"StorageWMI\""},{"InteractionType":0,"QuerySupportLevels":["WQL:UnarySelect"],"SupportsDelete":"True","SupportsEnumeration":"True","SupportsGet":"True","SupportsPut":"True","provider":"\\\\.\\root\\Microsoft\\Windows\\Storage:__Win32Provider.Name=\"iSCSIWMIv2\""},{"InteractionType":0,"QuerySupportLevels":["WQL:UnarySelect"],"SupportsDelete":"True","SupportsEnumeration":"True","SupportsGet":"True","SupportsPut":"True","provider":"\\\\.\\root\\Microsoft\\Windows\\Storage:__Win32Provider.Name=\"StorageWMI\""},{"CLSID":"{52C84ACA-027A-4536-A74A-E0BB50C44782}","HostingModel":"NetworkServiceHost","ImpersonationLevel":1,"InitializationReentrancy":0,"Name":"iSCSIWMIv2","PerLocaleInitialization":"False","PerUserInitialization":"False","Pure":"True","Version":1073741825},{"CLSID":"{B4A6821D-4D2E-40DD-9EE0-89C2CD07BF69}","HostingModel":"NetworkServiceHost","ImpersonationLevel":1,"InitializationReentrancy":0,"Name":"StorageWMI","PerLocaleInitialization":"False","PerUserInitialization":"False","Pure":"True","Version":1073741825}]
Expected: I'm not sure but looks like agent2 backslash escaping is correct e.g.
{"provider":"\\\\.\\root\\Microsoft\\Windows\\Storage:__Win32Provider.Name=\"iSCSIWMIv2\""}please recheck this.