Profile : http://community.spiceworks.com/profile/show/myprofile?tab=shared

SPICEWORKSSPICEWORKSSPICEWORKSSPICEWORKS

TUTORIAL

20 juillet 2012 Created by : Alexandre37

: http://community.spiceworks.com/profile/show/myprofile?tab=shared

SPICEWORKSSPICEWORKSSPICEWORKSSPICEWORKS

Summary

: http://community.spiceworks.com/profile/show/myprofile?tab=shared

1

SP

ICE

WO

RK

S |

20

/07

/20

12

SPICEWORKSSPICEWORKSSPICEWORKSSPICEWORKS

Summary

1 OPENING SPICEWORKS .................................................................................................. 2

2 DASHBOARD .............................................................................................................. 4

3 SETTING SPICEWORKS .................................................................................................... 4

3.1 NETWORK SCAN ................................................................................................... 6 3.1.1 SETUP IPS RANGE ............................................................................................. 6

3.1.2 CONFIGURE WINDOWS/SSH/SNMP ACCOUNTS....................................................... 8

3.1.3 SCHEDULED SCANS ........................................................................................... 9 3.1.4 SCAN ERRORS ................................................................................................. 9

3.2 ACTIVE DIRECTORY ............................................................................................... 10

3.2.1 SYNCHRONIZE ACTIVE DIRECTORY WITH SPICEWORKS ............................................... 10

3.2.2 ADS SYNCHRONIZATION FREQUENCY ................................................................... 10 3.2.3 SYNCHRONIZE SPICEWORKS WITH ACTIVE DIRECTORY ............................................ 11

3.2.4 ADDITIONAL ACTIVE DIRECTORY SETTINGS ............................................................ 11

3.3 ADVANCED & INTERNATIONAL OPTIONS ...................................................................... 12 3.3.1 PROXY CONFIGURATION .................................................................................. 12

3.3.2 MODIFYING SPICEWORKS LANGUAGE AND TIME/DATE FORMAT .................................... 12

3.4 MANAGING SPICEWORKS USERS ................................................................................ 13

4 AFTER THE NETWORK SCAN ........................................................................................... 13 4-1- SEARCHING NETWORK RESOURCES .............................................................................. 13

4-2- CREATING NEW GROUPS .......................................................................................... 16

4-3- MODIFYING RESOURCES ATTRIBUTS. ........................................................................... 17 IN ADDITION, A DEVICE CAN BELONG TO SEVERAL GROUPS, JUST ADD THEM LIKE ABOVE. ................... 17

4-4 PURCHASE MANAGEMENT. ....................................................................................... 17

4-5 VISIT ACTIVE DIRECTORY PEOPLE. ............................................................................... 18

5 SPICEWORKS DATA BASE............................................................................................... 20 5.1 DATA BASE EDITION ............................................................................................... 20

5.2 MAIN TABLES ....................................................................................................... 22

5.3 MAKING REPORTS ................................................................................................. 23 5.3.1 REPORTS AND WIDGETS. ..................................................................................... 25

5.3.2 SHARING REPORTS ............................................................................................. 27

6 SCAN ERRORS ............................................................................................................ 30

1 TIMEOUT WAITING FOR WMI CONNECTION .................................................................... 30 2 RPC SERVER IS UNAVAILABLE WINDOWS #800706BA ........................................................ 31

3 NO OPEN PORTS FOR THIS DEVICE WERE FOUND TO BE RESPONDING. ...................................... 32 4 CONFIGURATION BACKUP REQUIRES AN SSH OR TELNET ACCOUNT ....................................... 33

7 CONNECTING SPICEWORKS DATA BASE THANKS TO ODBC ..................................................... 35

1 - INTRODUCTION ...................................................................................................... 35 2 - WHAT DO WE NEED ? ................................................................................................ 35

3 - INSTALL AND CONFIGURE ODBC FOR SQLITE .................................................................. 35

4 - USING ODBC WITH EXCEL ......................................................................................... 38

5 - CONCLUSION ...................................................................................................... 42 8 BULK IMPORT ......................................................................................................... 43

2

SP

ICE

WO

RK

S |

20

/07

/20

12

1 1 1 1 Opening SpiceworksOpening SpiceworksOpening SpiceworksOpening Spiceworks

Since Spiceworks is installed, you may want to launch it.

Maybe you could get this error :

Error or not, there are two ways to launch Spiceworks : local or remotly. - Locally, enter the following URL: http://localhost/splash

If the machine on which Spiceworks is installed has for FQDN : SRV-SPICEWORKS ; If Spiceworks is configured for using the X port.

- Remotely, enter the following URL : http://srv-spiceworks:X/splash ,

Of course, you can replace the FQDN by the Spiceworks servers Ip address. Once Spiceworks is launched, its icon appears in the notification area. By clicking on it, you can access Spiceworks preference.

Setup here the famous X port you want Spiceworks to use.

In Startup Options, if you check the Spiceworks is running as a service option, as Windows service, you can start/stop it from

3

SP

ICE

WO

RK

S |

20

/07

/20

12

the command prompt by executing the following command : net start/stop Spiceworks. The service is set on automatic so it will be launched at the same time as the OS. As a service, Spiceworks wont appear anymore in the notification area.

If you are using Spiceworks for the first time, you will have to create an account, only after you will be able to login as below :

4

SP

ICE

WO

RK

S |

20

/07

/20

12

2 2 2 2 DashboardDashboardDashboardDashboard

Once you are connected, by default, Spiceworks will load the Dashboard page, which could change.

At the top of the page, you will find the main menus

- Community : It give you access to the Spiceworks community(help, share, tutorials) - Inventory : Allow you to configure Spiceworks. - HelpDesk : Help module of Spiceworks

- Purchasing : To handle your purchase.

3 3 3 3 Sett ingSett ingSett ingSett ing SpiceworksSpiceworksSpiceworksSpiceworks

To setup Spiceworks, Inventory>Settings :

5

SP

ICE

WO

RK

S |

20

/07

/20

12

Well, as you can see, there are many things to setup. Lets check how to.

3.1 3.1 3.1 3.1 Network ScanNetwork ScanNetwork ScanNetwork Scan

This is where you want to go when you want to specify what IPs you want t

3.13.13.13.1.1.1.1.1 Setup IPs rangeSetup IPs rangeSetup IPs rangeSetup IPs range

To add a new scan entry, simply click on click here to add a

This is where you want to go when you want to specify what IPs you want to scan. Below, see what it look

click here to add a new scan entry .

6

SP

ICE

WO

RK

S |

20

/07

/20

12

o scan. Below, see what it looks like.

7

SP

ICE

WO

RK

S |

20

/07

/20

12

I want to scan the following range : 192.168.1.because this is equivalent to 192.168.1.1-254

It is the same for the following bytes. If I want to scan from with 192.168.1-10.1-254.

If you have disjoint ranges, the syntax will be RANGE_1 SPACE RANGE_2 or RANGE_1 RANGE_2 without the of course. Example : 192.168.1-10.1-254 192.168.

Instead of disjointing ranges, you can make it contiguous then exclude what you dont want to scan. Ssame rules as above.

If you check the Custom Scan Settings then you

192.168.1.1 to 192.168.1.254. Will i want to write each ip addresses254.

for the following bytes. If I want to scan from 192.168.1.1 192.168.10.254, I will fill the Device/Range field

disjoint ranges, the syntax will be RANGE_1 SPACE RANGE_2 or RANGE_1 RANGE_2 without the of 192.168.12-14.1-254.

Instead of disjointing ranges, you can make it contiguous then exclude what you dont want to scan. S

If you check the Custom Scan Settings then you will be able to schedule the scan execution.

Will i want to write each ip addresses ? No I will not

I will fill the Device/Range field

disjoint ranges, the syntax will be RANGE_1 SPACE RANGE_2 or RANGE_1 RANGE_2 without the of

Instead of disjointing ranges, you can make it contiguous then exclude what you dont want to scan. Scan exclusions follow the

You can also order your scan entries by clicking on the upper right button.

Uncheck a scan entry to disable it temporarily.

3.1.2 3.1.2 3.1.2 3.1.2 Conf igureConf igureConf igureConf igure Windows/SSH/SNMPWindows/SSH/SNMPWindows/SSH/SNMPWindows/SSH/SNMP

How do Spiceworks to pull up data from your network Windows OS. It is necessary to configure corresponding accounts so you wont get scan errors. If errors occur, you can check the tutorials error section.

There are different ways to connect remotelyprotocol. According to your policy, you will have to configure properly the corresponding accounts.

- Windows account allows you to fill the administ- Telnet, SSH, HTTP accounts will be used for SNMP devices.- SNMP account will specify the community to use. By default, the public community is enabled. You can create a new one for are configured to work with it. Once your accounts have been created, if they need to be modified, you will find at the bottom of the scanyou can edit your scan entries and specify accounts they will need if this has not been done yet.

You can also order your scan entries by clicking on the upper right button.

Uncheck a scan entry to disable it temporarily.

Windows/SSH/SNMPWindows/SSH/SNMPWindows/SSH/SNMPWindows/SSH/SNMP accountsaccountsaccountsaccounts

from your network resources? By using SNMP protocolWindows OS. It is necessary to configure corresponding accounts so you wont get scan errors. If errors occur, you can check

remotely to network resources. This can be performed by using telnet, ssh, http protocol. According to your policy, you will have to configure properly the corresponding accounts.

you to fill the administrator account of the domain. accounts will be used for SNMP devices.

SNMP account will specify the community to use. By default, the public community is enabled. You can create a new one for the private communi

accounts have been created, if they need to be modified, you will find at the bottom of the scanyou can edit your scan entries and specify accounts they will need if this has not been done yet.

8

SP

ICE

WO

RK

S |

20

/07

/20

12

By using SNMP protocol or WMI for machines using Windows OS. It is necessary to configure corresponding accounts so you wont get scan errors. If errors occur, you can check

to network resources. This can be performed by using telnet, ssh, http protocol. According to your policy, you will have to configure properly the corresponding accounts.

private community if your network devices

accounts have been created, if they need to be modified, you will find at the bottom of the scans settings page. Now

9

SP

ICE

WO

RK

S |

20

/07

/20

12

3.1.3 3.1.3 3.1.3 3.1.3 Scheduled scansScheduled scansScheduled scansScheduled scans

Instead of creating for each scan entry a specific scheduled scan, you can setup a global scheduled scan for all entries.

3.1.4 3.1.4 3.1.4 3.1.4 Scan errorsScan errorsScan errorsScan errors

If after your scan you get errors, refer to the tutorial errorssection.

3.2 3.2 3.2 3.2 Act ive directoryAct ive directoryAct ive directoryAct ive directory

3.2.1 3.2.1 3.2.1 3.2.1 SynchroniSynchroniSynchroniSynchronize Active Directory with Spiceworksze Active Directory with Spiceworksze Active Directory with Spiceworksze Active Directory with Spiceworks

Spiceworks offers you to synchronize your Activenecessary to fill the administrator credentials of your AD server.

3.2.2 3.2.2 3.2.2 3.2.2 ADs synchronizat ion frequencyADs synchronizat ion frequencyADs synchronizat ion frequencyADs synchronizat ion frequency

Now you are able to synchronize your AD with Spiceworks, you can specify a frequency to reoccurred.

This being said, once you checked AD scanning

In that case, uncheck, wait about 3 minutes and check again. That should solve this problem. By the way, you can use this method to force AD synchronization if you dont want to wait 30 minutes.

ze Active Directory with Spiceworksze Active Directory with Spiceworksze Active Directory with Spiceworksze Active Directory with Spiceworks

Spiceworks offers you to synchronize your Active Directory. The result will be available in settings>people.necessary to fill the administrator credentials of your AD server.

ADs synchronizat ion frequencyADs synchronizat ion frequencyADs synchronizat ion frequencyADs synchronizat ion frequency

Now you are able to synchronize your AD with Spiceworks, you can specify a frequency to re-synchronize in case changes

AD scanning , you may have the following error.

In that case, uncheck, wait about 3 minutes and check again. That should solve this problem. By the way, you can use this if you dont want to wait 30 minutes.

10

SP

ICE

WO

RK

S |

20

/07

/20

12

in settings>people. For this, it is

synchronize in case changes have

In that case, uncheck, wait about 3 minutes and check again. That should solve this problem. By the way, you can use this

11

SP

ICE

WO

RK

S |

20

/07

/20

12

3.2.3 3.2.3 3.2.3 3.2.3 Synchronize Spiceworks with Act ive DirectorySynchronize Spiceworks with Act ive DirectorySynchronize Spiceworks with Act ive DirectorySynchronize Spiceworks with Act ive Directory

The above operation can be reversed thanks to this option. If yoallows Spiceworks to overwrite Active Directory

3.2.4 3.2.4 3.2.4 3.2.4 Additional Active Additional Active Additional Active Additional Active DirectoryDirectoryDirectoryDirectory

When importing Active Directory, you might want to import only some of your UO. Here you can specify your corrBase DN of your choice.

Moreover, if an AD user doesnt have its email address filled, Spiceworks will not import it. The option Use principal name for email if blank in AD allows Spiceworks to import

Synchronize Spiceworks with Act ive DirectorySynchronize Spiceworks with Act ive DirectorySynchronize Spiceworks with Act ive DirectorySynchronize Spiceworks with Act ive Directory

The above operation can be reversed thanks to this option. If you did any changes in Spiceworks>Spiceworks to overwrite Active Directorys data so you will not have to make the changes twice.

DirectoryDirectoryDirectoryDirectory sett ingssett ingssett ingssett ings

When importing Active Directory, you might want to import only some of your UO. Here you can specify your corr

email address filled, Spiceworks will not import it. The option Use principal name for email if blank in AD allows Spiceworks to import contact even if the AD user does not have an email address filled.

u did any changes in Spiceworks>settings>people, this option data so you will not have to make the changes twice.

When importing Active Directory, you might want to import only some of your UO. Here you can specify your corresponding

email address filled, Spiceworks will not import it. The option Use principal name for an email address filled.

3.3 3.3 3.3 3.3 Advanced & Internat ional Opt ionsAdvanced & Internat ional Opt ionsAdvanced & Internat ional Opt ionsAdvanced & Internat ional Opt ions

3.3.1 3.3.1 3.3.1 3.3.1 Proxy Conf igurationProxy Conf igurationProxy Conf igurationProxy Conf iguration

In case your network is running through a proxy, you will have to fill the

3.3.2 3.3.2 3.3.2 3.3.2 Modifying Spiceworks language and Modifying Spiceworks language and Modifying Spiceworks language and Modifying Spiceworks language and

If you are french like me, you might want to change hour and date format like I did below. This is very intuitive, look at thvariables, %H for hours You have an explanation Spiceworks interface is natively using the English language however you can change it. If your language is not in the list, go check the available Language Packs created by the community.

Advanced & Internat ional Opt ionsAdvanced & Internat ional Opt ionsAdvanced & Internat ional Opt ionsAdvanced & Internat ional Opt ions

a proxy, you will have to fill the information below.

Modifying Spiceworks language and Modifying Spiceworks language and Modifying Spiceworks language and Modifying Spiceworks language and time/date formattime/date formattime/date formattime/date format

If you are french like me, you might want to change hour and date format like I did below. This is very intuitive, look at than explanation for every of them by clicking on the Date/Time Forma

interface is natively using the English language however you can change it. If your language is not in the list, go check the available Language Packs created by the community.

12

SP

ICE

WO

RK

S |

20

/07

/20

12

If you are french like me, you might want to change hour and date format like I did below. This is very intuitive, look at the licking on the Date/Time Formatting ? link.

interface is natively using the English language however you can change it. If your language is not in the list, go

13

SP

ICE

WO

RK

S |

20

/07

/20

12

3.4 3.4 3.4 3.4 Managing Spiceworks usersManaging Spiceworks usersManaging Spiceworks usersManaging Spiceworks users

When you are first logging into Spiceworks, it creates your profile here. Maybe you want to give a Spiceworks access to your teammates. Add their account here.

4 4 4 4 Af ter the network scanAfter the network scanAfter the network scanAfter the network scan

4444----1111---- Searching network resourcesSearching network resourcesSearching network resourcesSearching network resources

Now the scan has been performed, you can pay a visit to your network devices in Inventory>devices.

Spiceworks has default categories to sort devices according to the type they belong to. Of course, you can create custom categories so you can sort them to your wishes by making advanced filters.

Nice trick if you are allergic to the previous display mode. You can switch

Search the device you want to look at and then click on it.

Spiceworks has default categories to sort devices according to the type they belong to. Of course, you can create custom them to your wishes by making advanced filters.

Nice trick if you are allergic to the previous display mode. You can switch it like below.

Search the device you want to look at and then click on it.

14

SP

ICE

WO

RK

S |

20

/07

/20

12

Spiceworks has default categories to sort devices according to the type they belong to. Of course, you can create custom

15

SP

ICE

WO

RK

S |

20

/07

/20

12

You have useful extra-tools if you need to test

tools if you need to test some things.

16

SP

ICE

WO

RK

S |

20

/07

/20

12

4444----2222---- Creating new groupsCreating new groupsCreating new groupsCreating new groups

You want to create a new group ? For sure ! Then click on the upper right gear !

I am creating a group named Mon groupe . I want this group to gather all the devices with a mac address beginning with

00:. Okay, this is damn useless but it is just an example. You can make such more advanced filters.

17

SP

ICE

WO

RK

S |

20

/07

/20

12

4444----3333---- Modify ing resources Modify ing resources Modify ing resources Modify ing resources attr ibutesattr ibutesattr ibutesattr ibutes ....

Sometimes, some devices may contain corrupted information or maybe you just want to change/add some. Likely, you can edit devices information. If the devices got the write right, then Spiceworks will push it back to the devices ! How nice.

In addition, a device can belong to several groups, just add them like above.

4444----4 4 4 4 Purchase managementPurchase managementPurchase managementPurchase management ....

18

SP

ICE

WO

RK

S |

20

/07

/20

12

You can attach to a device :

- a ticket - A purchase - A warranty

If you need to create a ticket for a device for any reason, for a better management, you can attach it to the device. The purchase thing allows you to fill a monthly cost for a period that finally comes to give you the total cost. Imagine this has been done for all your devices. A simple SQL request could tell you wonderful things about your whole network. The warranty thing allows you to remind when time has come for renewing contracts as an example.

4444----5 5 5 5 Visi t Act iveVisi t Act iveVisi t Act iveVisi t Act ive DirectoryDirectoryDirectoryDirectory peoplepeoplepeoplepeople ....

To visit your people then go to Inventory>People.

19

SP

ICE

WO

RK

S |

20

/07

/20

12

To access people properties, just click on it. To modify its attributes, it is as pretty exactly as for the devices, proceed in the same way. Keep in mind that if you did make changes, they will be pushed up from Spiceworks to AD if you check the right

option.

Something interesting is that you can associate devices to an ad user. Among them, one will be the primary and others

secondarys. It is just matter of choices.

For example, I am going to associate a computer to an ad_user. Oh no, I have like 500 people in my AD. I dont want to grind

#.-. Dont worry, we will see later how to make it more kindly.

20

SP

ICE

WO

RK

S |

20

/07

/20

12

5 5 5 5 Spiceworks data base.Spiceworks data base.Spiceworks data base.Spiceworks data base.

5.1 5.1 5.1 5.1 Data base edit ionData base edit ionData base edit ionData base edit ion

Spiceworks uses a data base to stock and order data. This data base is compatible with SQLITE3. I will guess you are not using IE but Firefox or Chrome. In this case, install the SQLITE3 module. Then, you are able to open the database from your internet browser.

Open the SQLITE module and browse your hard drive into your Spiceworks folder ../Spiceworks/db/Spiceworks_prod.db. You may have to change the file extension to see it because it is .db and not .sqlite.

If you want to execute a SQL request, go to Execute SQL and fill your SQL code. If you want to browse the data base and see what tables are containing, go to browse and search. Select a table on the left and have a look at it.

21

SP

ICE

WO

RK

S |

20

/07

/20

12

For example, I want to see several information of the ad_users table. Below, you have the SQL request code and the result.

22

SP

ICE

WO

RK

S |

20

/07

/20

12

5.2 5.2 5.2 5.2 Main tablesMain tablesMain tablesMain tables

It depends on what you want to do but the main tables look like to be :

- Ad_users(id, attributes, user_id) - Users(id, attributes ) - Devices(id, attributes, user_id)

Tables ad_users and devices are linked by the users table. That means it will be possible to relate attributes from ad_users and devices in order to get extra information by joining them.

The devices table obviously stores several information about the devices. The users table basically contains all the users defined in Spiceworks (admin account, manual creation of people). The ad_users table stores all the data that are filled in your AD. Actually, this table is just an image of what you have in your AD.

When you check the AD scanning option, firstly the ad_users is filled and then Spiceworks copy chosen information into its own users table users. If you do some manual editions to change information, these information will only be modified in the users table. On the other hand, if you check Sync changes with AD, this time what you did change in the users table will change the ad_users.

Of course, there are a lot more of tables. You will have to browse them if you need specific information to get the tables name.

23

SP

ICE

WO

RK

S |

20

/07

/20

12

5.3 5.3 5.3 5.3 Making reportsMaking reportsMaking reportsMaking reports

There is another way to execute SQL request. Spiceworks includes a report module. You can find it in Inventory>Reports.

By clicking on New Report , you will be able to create a custom SQL request. You can save it to execute it later.

Give a name and a description to your report. You can make it public. That means users defined to log into Spiceworks will be able to see your own reports. If you want to make it public to the community, you will have to share it. By the way, the display is customizable but what you see on your dashboard only concerns your profile.

Check the Build this reports using SQL to create your report as a SQL request. At the end, click on Save and run.

24

SP

ICE

WO

RK

S |

20

/07

/20

12

If you go back to inventory>Reports, you will see your new report to appear. By clicking on the arrow, more options will be

offered. Run, edit, share, export or delete.

25

SP

ICE

WO

RK

S |

20

/07

/20

12

5.3.1 Reports and Widgets.5.3.1 Reports and Widgets.5.3.1 Reports and Widgets.5.3.1 Reports and Widgets.

You can display the results from your SQL request as a graph : pie or bar. When you are creating your SQL report, check Make this report available as a widget.

26

SP

ICE

WO

RK

S |

20

/07

/20

12

If you run again your reports, youll see the graph by now ! However, to display SQL results as a widget, you will have to invert line and column in order to give them a legend. For example, making a sum on a row will need to do this. Usual SQL request could be for example: SELECT column1 As Column 1, column2 As Column 2 FROM TABLE WHERE column1 = condition; The result will be display like this.

Column1 Column2 Value 1 Value 2

To get this working as a widget, you will have to write your request so the result be displayed like this :

X Y=F(X) Column1 Value 1 Column2 Value 2

The equivalent request for this can be like this :

SELECT Column 1, column1 As Y=F(X) FROM TABLE WHERE column1 = condition UNION SELECT Column 2, column2 FROM TABLE WHERE column1 = condition

This way, the SQL request will be available as a widget. You have to notice that that you can choose the name Y=F(X) however the X name will be the set at Column 1 by default and I dont know how to fix this but it doesnt really matter.

Using this request :

SELECT 'TOTAL SIZE (TB)', round((SUM(size))/(1024*1024*1024*1024.0),2) As 'SIZE_TB' FROM disks WHERE description like '%Local Disk%' and name not like '%syst%' and name not like '%recovery%'; UNION SELECT 'USED SPACE (TB)', round((SUM(size)-SUM(free_space))/(1024*1024*1024*1024.0),2) FROM disks WHERE description like '%Local Disk%' and name not like '%syst%' and name not like '%recovery%'; UNION SELECT 'FREE SPACE (TB)', round(SUM(free_space)/(1024*1024*1024*1024.0),2) FROM disks WHERE description like '%Local Disk%' and name not like '%syst%' and name not like '%recovery%';

27

SP

ICE

WO

RK

S |

20

/07

/20

12

ORDER BY SIZE_TB DESC

From what I said, the SQL result will be displayed like this :

TOTAL SIZE SIZE_TB TOTAL SIZE VALUE 1 USED SPACE VALUE 2 FREE SPACE VALUE 3

After running the report, this is what you get :

5.3.2 Sharing reports5.3.2 Sharing reports5.3.2 Sharing reports5.3.2 Sharing reports

You can share your reports.

28

SP

ICE

WO

RK

S |

20

/07

/20

12

Assuming you have modified your SQL request for X reason and you want to update it, the procedure is the same as sharing. Click again on share for the reports you want to update then Spiceworks will ask you if you wish to update it !. If you want to save the old version, rename your old report as a new one, create a new report with the same name like the previous one then share so Spiceworks will ask you if want to update.

Once shared, Spiceworks will lead you to this page.

29

SP

ICE

WO

RK

S |

20

/07

/20

12

If you want to take a look to your shares, then go to My Profile.

Click on Shared Items.

Then you will have an overview of your shares.

30

SP

ICE

WO

RK

S |

20

/07

/20

12

6666 Scan errorsScan errorsScan errorsScan errors

1 Timeout Waiting for WMI ConnectionTimeout Waiting for WMI ConnectionTimeout Waiting for WMI ConnectionTimeout Waiting for WMI Connection

WMI uses DCOM protocol to connect itself to the machines. If is not activated, WMI will not work and Spiceworks will pull up this kind of errors. Moreover, the machine hosting Spiceworks must be allowed by the remote machines to use this protocol. To check if the WMI protocol is started on a machine

- Open a command prompt - Write the following command line :

If the result is the service is already started, then the problem does not come from here. Else, you will have to deploy the following GPO so the WMI service will automatically launch itself at Windows startup. Computer Config > Policies > Windows Settings > Security Settings > Windows Firewall with Advanced Security > Windows Firewall with Advanced Security > Inbound Rules node. Edit this GPO and choose allow connection .

Now the WMI service is started, you have to allow the traffic between remote machines and the Spiceworks server. Again, you have to edit the following GPOs :

- DCOM : Machine access restrictions in security

- DCOM : Machine launch restrictions in security

You will find the GPO in :

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

31

SP

ICE

WO

RK

S |

20

/07

/20

12

2 2 2 2 RPC Server is unavailable Windows #800706BARPC Server is unavailable Windows #800706BARPC Server is unavailable Windows #800706BARPC Server is unavailable Windows #800706BA

There are two ways to proceed : 1. Command prompt

1.1. For Windows XP

1.1.1. If the machine is in the same subnet or network as the Spiceworks server. c:\> netsh firewall set service remoteadmin enable subnet

1.1.2. If the machine is in another subnet or networt as the Spiceworks server. c:\> netsh firewall set service remoteadmin enable

1.2. For Windows Vista/7 c:\> netsh advfirewall firewall set rule group="windows management instrumentation (wmi)" new enable=yes

firewall set rule group="remote administration" new enable=yes

2. Using GPOs You have to allow these GPOs.

- Windows Firewall: Allow remote administration exception

- Windows Firewall: Allow ICMP exceptions

You will find them in : Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile

32

SP

ICE

WO

RK

S |

20

/07

/20

12

3 3 3 3 No open ports for this device were found to be responding.No open ports for this device were found to be responding.No open ports for this device were found to be responding.No open ports for this device were found to be responding.

There are several reasons for this error

- Incorrect permissions for WMI - Incorrect DNS informations - Windows Firewall is blocking ports - Antivirus is blocking ports

1 Permissions incorrectes pour WMI

Check the number one point.

2 Information DNS incorrectes

If this error was not due to the WMI thing, it is probably because of the DNS.

From the machine hosting Spiceworks

- Open a command prompt - Execute the following command line

nslookup [IP ADDRESS] If this works, it must return the HOSTNAME

- Now, we have to check the reverse : nslookup [MACHINE HOSTNAME] If this works, it must return the IP ADDRESS.

If not, look out for DNS issues.

33

SP

ICE

WO

RK

S |

20

/07

/20

12

4 4 4 4 Conf igurat ion Backup requires an SSH or Telnet AccountConf igurat ion Backup requires an SSH or Telnet AccountConf igurat ion Backup requires an SSH or Telnet AccountConf igurat ion Backup requires an SSH or Telnet Account

To solve this issue, you have to create the appropriates SSH or Telnet accounts.

34

SP

ICE

WO

RK

S |

20

/07

/20

12

35

SP

ICE

WO

RK

S |

20

/07

/20

12

7 7 7 7 Connect ing Spiceworks data base thanks to ODBCConnect ing Spiceworks data base thanks to ODBCConnect ing Spiceworks data base thanks to ODBCConnect ing Spiceworks data base thanks to ODBC

1 1 1 1 ---- IntroductionIntroductionIntroductionIntroduction

The tutorial purpose is to find out how to connect the Spiceworks data base to excel

Hey man, why would we do that ? You are aware that thanks to the report section in Spiceworks, you can build custom SQL requests and/or download some of them from the community report sharing page. If you want to export request results, you have a Spiceworks functionality to do this. However, each time you want to refresh them, you have to export the request again into Excel.

ODBC allows you to execute and import directly SQL requests on the Spiceworks data base in Excel. Useful ?

2 2 2 2 ---- What do we need ?What do we need ?What do we need ?What do we need ?

1. Spiceworks (No way ?) 2. Excel 3. ODBC for SQLITE (http://www.ch-werner.de/sqliteodbc/) 4. Some SQL requests

3 3 3 3 ---- Instal l and configure ODBC for SQLITEInstal l and configure ODBC for SQLITEInstal l and configure ODBC for SQLITEInstal l and configure ODBC for SQLITE

Download ODBC from : http://www.ch-werner.de/sqliteodbc/ The direct link for the actual last release is http://www.ch-werner.de/sqliteodbc/sqliteodbc.exe. Once installed, you may want to go now to the control panel>administrative tools>ODBC and open what we are working for.

You also can open ODBC in one shot with the run command odbcad32 if you are lazy :D.

As you saw, my GUI is in French, Ill try to give you the best translation but I wont bet my life this will be good ones. What we need to do is to create a system data source. You can also create a user data source but this will be effective only on the

36

SP

ICE

WO

RK

S |

20

/07

/20

12

user computer whereas the system source system will share with other allowed users the ODBC and requests. Once you have open ODBC, look for this :

My ODBC for Spiceworks is already created but I will show you with a new one. Next add.. and chose SQLite3 ODBC Driver

Fill the next windows as below :

37

SP

ICE

WO

RK

S |

20

/07

/20

12

When looking for the spiceworks data base, click browse and go to ..\spiceworks\db\spiceworks_prod.db. Maybe, you will have to change the file extention to make the .db file to appear.

Finally, this is what you get when all of this has been done :

38

SP

ICE

WO

RK

S |

20

/07

/20

12

4 4 4 4 ---- Using ODBC with ExcelUsing ODBC with ExcelUsing ODBC with ExcelUsing ODBC with Excel

I am going to show you how to create a sheet where you will add the SQL requests you want to execute. When this will be done, just save the sheet. Open it later, refresh to get the results =). Once Excel is opened, locate the DATA button then click on FROM ANOTHER SOURCES

Click on MICROSOFT QUERY.

39

SP

ICE

WO

RK

S |

20

/07

/20

12

If things did go straight, you must see appearing the Spiceworks v2 data base we created earlier. You can see Spiceworks v2 I created with you as well as Spiceworks, the one I actually use. Click OK.

Microsoft Query will open, then choose file>Execute SQL.

Copy/past the SQL Query you want to execute. You can use the queries I shared on my profile for the community if you want to.

40

SP

ICE

WO

RK

S |

20

/07

/20

12

Now you can star at the result, pretty cool I think. But it is not over yet.

I guess nobody wish to copy/paste each time the request to get the result, so I suggest you to save it. File>save as

41

SP

ICE

WO

RK

S |

20

/07

/20

12

Close Microsoft Query or add another queries if you want to. Then go back to Excel>data>Existing Connections. If things did go straight, you must see queries you saved earlier. MY_REQUEST is selectable, so select it.

42

SP

ICE

WO

RK

S |

20

/07

/20

12

When selected, Excel will ask you as below where you want to import data, so obviously you may want to use the first cell of the sheet. Then click OK.

Here is the result :

5 5 5 5 ---- ConclusionConclusionConclusionConclusion

As a conclusion, just save your sheet or open a new sheet in your workbook to import more queries. From now on, just open your sheet, click on refresh and do what you have to with data. For MacroMen, VBA users I think you might find this a bit usefull.

43

SP

ICE

WO

RK

S |

20

/07

/20

12

8 8 8 8 BULK IMPORTBULK IMPORTBULK IMPORTBULK IMPORT

To import none scannable data into Spiceworks, it is possible to use the bulk import that allows you to import devices from a csv file.

Step 1 : Make backup of the data base by going there : Settings -> Backup Configuration -> Back up Now. Step 2 : Go to ..\ Spiceworks\pkg\gems. Step 3 : Look for the the directory with the latest version like spiceworks-x.x.xxxx with x.x.xxxx the version of Spiceworks. Step 4 : Copy ..\ Spiceworks\pkg\gems\ spiceworks-x.x.xxxx\bulk_import.rb to C:\Program Files\Spiceworks\bin Step 5 : Open a cmd prompt and naviguate to ..\Spiceworks\bin.

Execute this command line to be able to use the bulk_import.rb

ruby bulk_import.rb -h Assuming you have a csv file, you are ready to perform a bulk import. Still, in the cmd prompt, you will have to call bulk_import.rb with the following options.

-e email id@domain.com -p password my_pwd -s server Spice-srv.domain.com -P Spiceworks port X -V Verbose More details while importing

To import file.csv, the command line to execute is :

If you are doing this from a remote computer

Ruby Bulk_import.rb e id@domain.com p my_pwd s spice-srv.domain.com P X V file.csv

OR If your are doing this from the Spiceworks server

Ruby Bulk_import.rb e id@domain.com p my_pwdV file.csv How to create your csv file ?

First, it must use the , separator and not ;. The first line of the csv must be the names of the rows of the devices table in the Spiceworks database. However you can choose what information you want to import. At least, you must specify the name of the device to import. It is the minimal. You shall know that if you have devices with equal names, then you must specify the at least the serial number of the devices. Else, the bulk import will failed because Spiceworks gives for serial number the name of the device if none specified. Thus, 2 devices can not have the same serial number if the name is the same. Make senses.

Name item1 item1 item2

It will fail.

Name, serial_number item1,SN1 item1,SN2 item2,SN1

It will work.

44

SP

ICE

WO

RK

S |

20

/07

/20

12

There it is, the row names of the devices table you want to import into the Spiceworks database. DEVICES TABLE

id

name

type

description

server_name

domain

manufacturer

model

os_serial_number

windows_product_id

serial_number

ip_address

mac_address

operating_system

version

windows_user

primary_owner_name

memory

management_oid

last_boot_up_time

service_pack_major_version

service_pack_minor_version

number_of_licensed_users

number_of_processors

processor_type

created_on

kernel

page_count

install_date

device_type

current_user

bios_version

location

online_at

offline_at

asset_tag

manually_added

bios_date

c_purchase_price

c_purchase_date

b_name

b_device_type

b_asset_tag

b_manufacturer

b_model

45

SP

ICE

WO

RK

S |

20

/07

/20

12

b_primary_owner_name

b_serial_number

warning_alert_count

error_alert_count

open_ticket_count

auto_tag

user_tag

exclude_tag

last_scan_time

spice_version

vpro_level

last_backup_time

user_id

user_primary

swid

product_categories

domain_role

b_description

site_id

remote_agent_id

I want to pick some of the above row name for the following csv file. So the csv header will look like this :

Name,device_type,manufacturer,model,mac_address,serial_number,ip_address

Some fields can be blank, but as I said, name cant be blank and serial_number can be blank but should not be to avoid errors. Here are some examples of bulk import :

46

SP

ICE

WO

RK

S |

20

/07

/20

12

I start a bulk import in the case im doing it froms the spiceworks server.

Now I start a second bulk import like if I was doing it remotely :

47

SP

ICE

WO

RK

S |

20

/07

/20

12

Here we are, data have been uploaded.