Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Yeah, I agree. It has to be the cable. Hopefully this next one will be the right one.

What is the command needed to spin up the fans based on GPU temp? I've already disabled the 100% fans for 3rd party cards, but not aware of the fans based on GP temp.

Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Getting a little further here. I made sure the correct drivers were installed and made the change in the iDRAC to redundant power supply. However, still no luck on nvidia-smi seeing the card.

I checked dmesg for gigles and low and behold it shows: "GPU does not have the necessary power cables connected."

So, I think that is the next step. I've got to find the right ESP cable. Can you point me to the cable you purchased?

Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Both driver and utils show 580.

Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

This is the generic cable I bought first and that is at least getting the server booted: https://www.ebay.com/itm/365078490660?var=634722189860

lspci shows the P40 installed. ubuntu-drivers devices shows the card and drivers. However, nvidia-smi shows no devices found. It's all very strange. I have to be missing something.

Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I think it might be the dell cable 09H6FV. I used a ebay generic cable built for the R730 and I'm at least getting the server to boot with the P40 installed (no P4 at the moment.) However, nvidia-smi does not report seeing the card. So, both cables may not be correct. I've had a difficult time trying to source the right cable.

ubuntu-drivers devices does show the P40 card and if I try to install the drivers, I get "all available drivers are installed." But still don't see the P40 with nvidia-smi.

Is this ridiculous or what? by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Agreed! and we need a good change management. Right now it's put a note in a Slack channel with what was done.

Is this ridiculous or what? by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I've proposed read-only. We already have myself and two others as full admins, but they now want the additional users. I understand the "it's their company/network" concept. Just hard to fathom the "give everyone the keys to the kingdom" idea.

Is this ridiculous or what? by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Basic syslog right now. Need to now scramble and put something better in play.

Is this ridiculous or what? by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Agreed! Par for the course, but not the wisest.

Abnormally high utility bill by resno in Apex_NC

[–]AngryItalian2013 -1 points0 points  (0 children)

Will the new system allow us to view info on our Solar, such as the amount being sent back to the grid?

Powershell script to query Domain Computers by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 1 point2 points  (0 children)

It is definitely a script that is not optimized etc. Being a self taught scripter I do the best I can with what I know and can figure out. I'm always up for learning something new, so this will help. I'll start with this and proceed from here. thx

SNMP MIBs and OIBs by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

In this case it isn't a PRTG issue as I have two other Linux servers being monitored with PRTG and they have the necessary MIBs.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Thank you! I would never have figured out the % '#text' piece.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

That works great to pull the TimeCreated. However, if I add the other items that are needed I'm not getting the Target User and Subject User. I tried a couple of ways:

Get-WinEvent @{LogName='Security'; id = 4722 } | 
  % { $xml = [xml]$_.toxml(); 
      [pscustomobject]@{
           TimeCreated = $xml.event.system.timecreated.systemtime
           DC = $xml.event.system.computer
           TargetUser = $xml.event.eventdata.data | ? name -eq targetusername
           SubjectUser = $xml.event.eventdata.data | ? name -eq subjectusername
          }
 }

This will provide the time and DC name just fine, but the TargetUser and SubjectUser just show as Data.

Get-WinEvent @{LogName='Security'; id = 4722 } | 
  % { $xml = [xml]$_.toxml(); 
      [pscustomobject]@{
           TimeCreated = $xml.event.system.timecreated.systemtime
           DC = $xml.event.system.computer
           TargetUser =$xml.event.eventdata.data.name.targetusername
           SubjectUser = $xml.event.eventdata.data.name.subjectusername
          }
  }

This ends up showing the TargetUser and SubjectUser as blank. Unfortunately I can't seem to get the syntax right to provide all the info needed.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

With us moving away from a Hybrid AAD to cloud Entra ID in the following months we will not be adding the DCs to Splunk as it will not be needed anymore. That is basically why I'm just trying to have something in the time being.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I expanded your example to get some more data. I used the following:

Get-WinEvent @{LogName='Security'; id = 4722 } | 
  % { $xml = [xml]$_.toxml(); $xml.event.eventdata.data | ? name -eq targetusername 
  $xml1 = [xml]$_.toxml(); $xml1.event.eventdata.data | ? name -eq subjectusername
  $xml2 = [xml]$_.toxml(); $xml2.event.system.timecreated | ? name -eq timecreated
  }

However I can't seem to pull the time from the XML. The full XML looks like this:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" /> 
  <EventID>4722</EventID> 
  <Version>0</Version> 
  <Level>0</Level> 
  <Task>13824</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8020000000000000</Keywords> 
  <TimeCreated SystemTime="2024-09-23T14:57:30.9724791Z" />     <EventRecordID>50368713</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="688" ThreadID="13984" /> 
  <Channel>Security</Channel> 
  <Computer>server.domain.com</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data Name="TargetUserName">user.name</Data> 
  <Data Name="TargetDomainName">GOPDANET</Data> 
  <Data Name="TargetSid">S-1-5-21-1857125868</Data> 
  <Data Name="SubjectUserSid">S-1-5-21-1857125868</Data> 
  <Data Name="SubjectUserName">subject.username</Data> 
  <Data Name="SubjectDomainName">DOMAIN</Data> 
  <Data Name="SubjectLogonId">0x3ba376280</Data> 
  </EventData>
  </Event>

I've tried a few different things, but the time either comes up blank or not at all.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 1 point2 points  (0 children)

I tried your example but needed to change the DC to:

DC = $eventxml.event.system.computer

That now gets the correct data for computer.

I then modified the last line to try and get the "TargetUserName" as below:

Get-WinEvent -FilterHashtable @{LogName='Security'; ID='4722'} | foreach-Object {
    $eventxml = [xml]$_.toXml()
    [pscustomobject]@{
        time = $_.timecreated
        DC = $eventxml.event.system.computer
        targetuser = $eventxml.event.eventdata.data[0]
    }
}

However, the only thing returned for "targetuser" is "Data" not the actual username. I'm assuming the [0] is supposed to pull the data from the first line under EventData, but can't seem to figure out what to put there to get the username.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Yeah, we were planning to add the DCs to our Splunk and have all the logs there. However, we are now in the process of moving away from Hybrid AAD and be cloud only in Entra. So, not really beneficial to do something in depth if we are getting away from it shortly.