Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Loopback address is shown while using Windows Event Collector on a workgroup machine

Created: 12 Mar 2013 • Updated: 13 Mar 2013 | 2 comments

Hi All,

We have installed a Win Event Collector on a Win2k3 machine which is part of a test workgroup. The machine is running with Symantec Event Agent and the Win Event Collector.

I've configured the Sensor properties as:

Monitored Host Name: Localhost

Monitored Host Account Name: ---------

Account Password: --------

I'm getting the logs from the Win2k3 machine, but the destination host and dest IP shows as 127.0.0.1

I've gone thru the links http://www.symantec.com/business/support/index?page=content&id=TECH123263, but could not fix it.

The Collection Device Host, Collection Device IP, IP Source Address has to correct host name and ip address.

only the dest host and dest ip has this loopback address.

Please help.

Regards,

SK

Operating Systems:

Comments 2 CommentsJump to latest comment

Laurent_c's picture

Hi,

Have you ran LiveUpdate on the collector ? I rememnber a similar that was fixed in a LU package.

Laurent

Milan_T's picture

You have configured on box integration and used localhost as monitored hostname.

I think uou have configured many workgroup systems using single sensor.

Now for internal communication logs it will show local host instead of host name.

You can liveupdate collector to resolve this issue or you can modify host file.