Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Event viewer fields for 2008 servers are not getting properly populated by Microsoft Windows Vista Event Collector 4.4

Created: 11 Nov 2012 | 2 comments

Hi All,

We are able to integrate the 2008 severs r1 and r2 but facing severe issues when trying to read the logs for the integrated servers with SSIM.

Description and Windows Message column is almost blank in every event of the server.

Collector name: Microsoft_Vista_and_Win_2008_Svr_v4.4.11_MSVista_MSWIN2k8Svr_EN

Require urgent help on this.

Comments 2 CommentsJump to latest comment

lukaszfr's picture

Hi,

Look at this article: http://www.symantec.com/docs/TECH146383
It's possible that you are facing exactly this issue... if yes, then you cannot do anything about it because it's a WinRM issue and not the collector...

Regards

Shahnawaz K's picture

Dear Antilles,

Do we have solution to overcome this issue. becoz recently i faced this issue whr i was unable to provide the logs as it is not reflecting only in SSIM.

There was local passwd change activirty hapn on the server for one user for which we didnt have any logs at SSIM .