What is the difference between MonitorWare Agent Workstation and Server?
Created 2004-01-13 by Rainer Gerhards
What is the difference between MonitorWare Agent Workstation (WS) and Server (SRV)?
The basic difference is based on the operating system the product runs on. If it is a workstations operating system like Windows XP, you need MonitorWare Agent Workstation. If it is a server Operating System like Windows Server 2003, you need the Server version. Other than that, some limits are different for the different editions.
To learn these exact differences, please visit the MonitorWare Agent Edition Comparison sheet. Please note that in that sheet “WS” means the workstation version while “SRV” means the server version.
Difference between ReceivedAt and DeviceReportedTime
Created 2003-05-10 by Wajih-ur-Rehman.
What is the difference between ReceivedAt and DevicedReportedTime?
I will explain you the difference by giving you two different scenarios:
Scenario 1: Using MonitorWare Agent as Event Log Monitor and Forwarding the data to another MonitorWare Agent using Syslog
In this case, the DeviceReportedTime is actually the time that is there in the Windows Event Log i.e. the time at which the message was written into the Windows Event Log. ReceivedAt time on the other hand is the time when the Syslog message is received at the Syslog Daemon, which in this case is the MonitorWare Agent.
Scenario 2: Using MonitorWare Agent as Event Log Monitor and Forwarding the data to another MonitorWare Agent using SETP
In this case, the DeviceReportedTime is once again the time that is there in the Windows Event Log i.e. the time at which the message was written into the Windows Event Log. ReceivedAt time, in this case, is the time at which the MonitorWare Agent picks up the data from the event log. Note that by design, SETP protocol doesn’t modifies the message as it is sent to the central daemon. So when the message receives at the central daemon, its ReceivedAt time stamp will not be changed. In other words, the ReceivedAt time stamp of any message would stay the same (i.e. the time when the event was read from the Windows Event Log)