'some' matchType for WMI Poller matches 2 or more, not 1 or more as docuemented
Description
Jason-Arass-MacBook-Pro-2:bin jay$ ./checkwmi -matchType one -wmiWql "Select * From Win32_Process" -wmiObject 'Name' -op EQ -value "regedit.exe" -domain . 172.16.93.151 'Administrator' 'f00bar@@' Checking: Select * From Win32_Process for Name Op: EQ Val: regedit.exe Check results: OK (32) Result for (1) \Name: System Idle Process Result for (2) \Name: System Result for (3) \Name: smss.exe Result for (4) \Name: csrss.exe Result for (5) \Name: csrss.exe Result for (6) \Name: wininit.exe Result for (7) \Name: winlogon.exe Result for (8) \Name: services.exe Result for (9) \Name: lsass.exe Result for (10) \Name: lsm.exe Result for (11) \Name: svchost.exe Result for (12) \Name: svchost.exe Result for (13) \Name: svchost.exe Result for (14) \Name: svchost.exe Result for (15) \Name: svchost.exe Result for (16) \Name: svchost.exe Result for (17) \Name: svchost.exe Result for (18) \Name: svchost.exe Result for (19) \Name: spoolsv.exe Result for (20) \Name: svchost.exe Result for (21) \Name: svchost.exe Result for (22) \Name: msdtc.exe Result for (23) \Name: sppsvc.exe Result for (24) \Name: WmiPrvSE.exe Result for (25) \Name: taskhost.exe Result for (26) \Name: dwm.exe Result for (27) \Name: explorer.exe Result for (28) \Name: Oobe.exe Result for (29) \Name: regedit.exe Result for (30) \Name: wuauclt.exe Result for (31) \Name: dllhost.exe Result for (32) \Name: TrustedInstaller.exe Jason-Arass-MacBook-Pro-2:bin jay$ ./checkwmi -matchType some -wmiWql "Select * From Win32_Process" -wmiObject 'Name' -op EQ -value "regedit.exe" -domain . 172.16.93.151 'Administrator' 'f00bar@@' Checking: Select * From Win32_Process for Name Op: EQ Val: regedit.exe Check results: CRITICAL (32) Result for (1) \Name: System Idle Process Result for (2) \Name: System Result for (3) \Name: smss.exe Result for (4) \Name: csrss.exe Result for (5) \Name: csrss.exe Result for (6) \Name: wininit.exe Result for (7) \Name: winlogon.exe Result for (8) \Name: services.exe Result for (9) \Name: lsass.exe Result for (10) \Name: lsm.exe Result for (11) \Name: svchost.exe Result for (12) \Name: svchost.exe Result for (13) \Name: svchost.exe Result for (14) \Name: svchost.exe Result for (15) \Name: svchost.exe Result for (16) \Name: svchost.exe Result for (17) \Name: svchost.exe Result for (18) \Name: svchost.exe Result for (19) \Name: spoolsv.exe Result for (20) \Name: svchost.exe Result for (21) \Name: svchost.exe Result for (22) \Name: msdtc.exe Result for (23) \Name: sppsvc.exe Result for (24) \Name: WmiPrvSE.exe Result for (25) \Name: taskhost.exe Result for (26) \Name: dwm.exe Result for (27) \Name: explorer.exe Result for (28) \Name: Oobe.exe Result for (29) \Name: regedit.exe Result for (30) \Name: wuauclt.exe Result for (31) \Name: dllhost.exe Result for (32) \Name: TrustedInstaller.exe
Environment
Operating System: All
Platform: All
Acceptance / Success Criteria
None
Lucidchart Diagrams
Activity
Benjamin Reed April 22, 2011 at 5:04 PM
Fixed in 1.9. Since people may be relying on this behavior (2 or more) I didn't change it in 1.8. This issue will show up in the release notes for 1.10.
Jason-Arass-MacBook-Pro-2:bin jay$ ./checkwmi -matchType one -wmiWql "Select * From Win32_Process" -wmiObject 'Name' -op EQ -value "regedit.exe" -domain . 172.16.93.151 'Administrator' 'f00bar@@'
Checking: Select * From Win32_Process for Name Op: EQ Val: regedit.exe
Check results: OK (32)
Result for (1) \Name: System Idle Process
Result for (2) \Name: System
Result for (3) \Name: smss.exe
Result for (4) \Name: csrss.exe
Result for (5) \Name: csrss.exe
Result for (6) \Name: wininit.exe
Result for (7) \Name: winlogon.exe
Result for (8) \Name: services.exe
Result for (9) \Name: lsass.exe
Result for (10) \Name: lsm.exe
Result for (11) \Name: svchost.exe
Result for (12) \Name: svchost.exe
Result for (13) \Name: svchost.exe
Result for (14) \Name: svchost.exe
Result for (15) \Name: svchost.exe
Result for (16) \Name: svchost.exe
Result for (17) \Name: svchost.exe
Result for (18) \Name: svchost.exe
Result for (19) \Name: spoolsv.exe
Result for (20) \Name: svchost.exe
Result for (21) \Name: svchost.exe
Result for (22) \Name: msdtc.exe
Result for (23) \Name: sppsvc.exe
Result for (24) \Name: WmiPrvSE.exe
Result for (25) \Name: taskhost.exe
Result for (26) \Name: dwm.exe
Result for (27) \Name: explorer.exe
Result for (28) \Name: Oobe.exe
Result for (29) \Name: regedit.exe
Result for (30) \Name: wuauclt.exe
Result for (31) \Name: dllhost.exe
Result for (32) \Name: TrustedInstaller.exe
Jason-Arass-MacBook-Pro-2:bin jay$ ./checkwmi -matchType some -wmiWql "Select * From Win32_Process" -wmiObject 'Name' -op EQ -value "regedit.exe" -domain . 172.16.93.151 'Administrator' 'f00bar@@'
Checking: Select * From Win32_Process for Name Op: EQ Val: regedit.exe
Check results: CRITICAL (32)
Result for (1) \Name: System Idle Process
Result for (2) \Name: System
Result for (3) \Name: smss.exe
Result for (4) \Name: csrss.exe
Result for (5) \Name: csrss.exe
Result for (6) \Name: wininit.exe
Result for (7) \Name: winlogon.exe
Result for (8) \Name: services.exe
Result for (9) \Name: lsass.exe
Result for (10) \Name: lsm.exe
Result for (11) \Name: svchost.exe
Result for (12) \Name: svchost.exe
Result for (13) \Name: svchost.exe
Result for (14) \Name: svchost.exe
Result for (15) \Name: svchost.exe
Result for (16) \Name: svchost.exe
Result for (17) \Name: svchost.exe
Result for (18) \Name: svchost.exe
Result for (19) \Name: spoolsv.exe
Result for (20) \Name: svchost.exe
Result for (21) \Name: svchost.exe
Result for (22) \Name: msdtc.exe
Result for (23) \Name: sppsvc.exe
Result for (24) \Name: WmiPrvSE.exe
Result for (25) \Name: taskhost.exe
Result for (26) \Name: dwm.exe
Result for (27) \Name: explorer.exe
Result for (28) \Name: Oobe.exe
Result for (29) \Name: regedit.exe
Result for (30) \Name: wuauclt.exe
Result for (31) \Name: dllhost.exe
Result for (32) \Name: TrustedInstaller.exe