Can I install the network services on a remote host with EventSentry 3.5?

Article ID: 384
Category: Network Services
Applies to: 3.5 and newer
Updated: 2022-06-15

EventSentry 3.4 and older use different installation files for the network services; please see knowledge base article 306
EventSentry 5.0 and newer use different installation files for the network services, please see knowledge base article 470.

To install the network services on a remote host in another subnet, first add the host in the other subnet to a group in the EventSentry management console machine and deploy the agent. Once you have deployed the agent, open the EventSentry installation directory (such as C:\Program Files (x86) EventSentry) on the EventSentry server, and copy the following files into a temporary folder such as "c:\temp":

  • es_network_svc_x64.exe
  • eventsentry_gui_x64.exe

Then copy the "x64" subfolder from the installation directory to your temporary folder. For example, copy the whole "C:\Program Files (x86)\EventSentry\x64" folder and paste it into "c:\temp" so that you end up with a "c:\temp\x64" folder.

Next, create a "resources" subfolder in your temporary folder (e.g. c:\temp\resources) and copy the mac_vendor.txt file from the C:\Windows\System32\eventsentry folder on the EventSentry server into your "resources" subfolder.

Once you've gathered those executables and DLLs, copy your temporary folder onto the host in the other subnet.

Log onto the host in the other subnet and copy the following files from the temporary folder into the "%SYSTEMROOT%\System32\EventSentry" folder:

  • msvcp140.dll
  • QtCore4.dll
  • QtXml4.dll
  • Qt5Core.dll
  • Qt5Xml.dll

While still logged onto the host in the other subnet, open the temporary folder and double-click the eventsentry_gui_x64.exe file to open the EventSentry Management Console. Once the management console opens, you can use the Home toolbar to click on "NETWORK SERVICES" and then click the "INSTALL" button in the settings. When the folder prompt opens, select the temporary folder that contains the es_network_svc_x64.exe file, for example you'd want to select the "c:\temp" folder.

Once installed, you can then configure the Syslog, SNMP and/or ARP components under "Network Services" and start the EventSentry Network Service on the host in the other subnet..