This error can usually be resolved in one of two ways: 1. If you are selecting the host name from an existing EventSentry group and the host has an IP address configured try to clear the IP address and try again. 2. If the host name does not have an IP address configured try to specify the FQDN name of the host instead of the NetBIOS name...
If you are trying to monitor a nondomain machine on a workstation you may run into an issue where you get access is denied even if you are using the credentials for a local administrator. In this case you may need to add a registry key that allows the account to access the ADMIN share. Open RegEdit and navigate to: HKEYLOCALMAC...
1 Make sure the EventSentry Heartbeat Monitor service on your management console computer is configured to run under an account that has administrator rights on your management console computer. To check/change this open the services manager Start run services.msc and doubleclick the EventSentry Heartbeat Monitor service and...
If you attempt to store authentication credentials in the EventSentry Management Console and receive the following error: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation. This indicates that either the EventSentry Management Consol...
Both the Heartbeat agent and the Management Console attempt to connect to the service control manager running on a remote host in order to query the status of or to manage the remote EventSentry service. The errors The network path was not found or The RPC server is unavailable can mean one of the following: The remote host has its ...
This is caused by a permission issue. Either the account which is being used to run the EventSentry console or the account configured for Set Authentication on the affected host is a valid account to log on but the account does not have Administrator permission for the affected host. Another possibility is that the permission is correct bu...
You may receive the following error: batch Unable to prepare configuration file. Unable to open file C:\Program Files x86\EventSentry\eventsentrysvcin.reg due to error 2 This is usually caused by the EventSentry console not running with the Administrator elevation token from the operating system. Normally this elevation is...
The full error is: Server disconnected before handshake completion. 0xffffffff. There was an error downloading the latest version information from the https://www.eventsentry.com web site. Please make sure that you have access to the https://www.eventsentry.com/ site. f you are using EventSentry 3.2 and older you will not be able to ch...
There are no command line tools to import the EventSentry configuration. The recommended way to import your configuration is using the EventSentry management console and going to HOME IMPORT.
If you use EventSentry 3.4 and have a build number older than 68 this error can indicate that either the SNMP check failed due to a blocked port UDP port 161 is required or that the device requires SNMP v3 authentication and this has not been set up yet in EventSentry or is set up incorrectly for the device. Please update your EventSentry...
Yes please navigate to https://www.eventsentry.com/support/documentation to download the help file and/or quickstart guide. Both documents are available in the following formats: Microsoft Help.chm Adobe PDF.pdf HTML.htm Multimedia Help.exe
Yes it is recommended that you uninstall EventSentry Light with the setup application prior to installing the trial or full version of EventSentry. You will not need to uninstall the agents service from remote machines simply use Remote Update to update the agents on the remote machines once you have installed the trial version.
If you use the builtin Postgres database you may need to optimize it: https://www.eventsentry.com/kb/232 If you use Microsoft SQL as your database you may need to optimize it: https://www.eventsentry.com/kb/35 If the recommended optimizations do not help please contact our support department for more indepth assistance. If you have a...
This error reported by Windows usually appears when Client for Microsoft Networks and/or NetBIOS are not installed on the management workstation and target machines for example when using Novell software. You will need to make sure that the Client for Microsoft Networks is installed when using remote update to install agents on remote...
The EVENTSENTRYSVC.LOG file located in the SYSTEMROOT directory usually c:\winnt or c:\windows is the debug log file of the EventSentry agent. To reduce the size of this file set the Debug Level option in Service Control to None or Low and restart the EventSentry service. The contents of this file are always cleared when the ...
It is important that filters using summary notifications are NOT configured to notify All Targets. When using summary notifications make sure that one and only one target is present in the filters Targets list of the General tab.
After making configuration changes on your management workstation you will need to use the Update Configuration feature of remote update to push the updated configuration to your remote machines. Rightclick the Computers container of the group you want to update and select Update Configuration. In the next dialog make sure that the co...
When using ODBC targets you will need to make sure that: The System DSN referenced in the ODBC target is present on all computers writing to the database. This requirement does not apply to version 2.50 and higher which also supports connection strings. Otherwise you can use AutoAdministrator to push out DSN names to remote machines. ...
Starting with EventSentry version 2.70 you can view the native event log files usually with a .evt extension with the builtin event log viewer of EventSentry. Simply rightclick the Event Log Viewer container and select Open Log File. If you are running EventSentry v2.60 or earlier then you will need to open the event log files with th...
You can be notified when a remote web site certificate is about to expire using checkurl.exe from EventSentry SysAdmin Tools. For that we are going to: 1. Install EventSentry SysAdmin tools to user checkurl.exe feature. 2. Create an User Embedded Scrip 3. Create an application schedule to run the script on certain schedule. 4. Creating ...
Yes any user with administrative privileges can view and change the EventSentry configuration. The entire EventSentry configuration is stored on a permachine basis so it doesn39t matter which user logs on to the computer where the EventSentry management application is installed. The only settings that are store on a peruser basis are th...
No restarting the EventSentry service on any machine will have no effect on other machines since the agent only works with the local event logs. The EventSentry agent does write a few events to the local machine39s Application event log upon a service restart however.
Filters are processed sequentially onebyone by the EventSentry agent. If an event matches multiple filters then every filter matching the event will send the event information to the configured target. This usually happens when more than one filter is configured to use Trigger all actions. To avoid seeing events multiple times: Co...
Some antivirus software products e.g. McAfee starting with version 8.x block and/or intercept outgoing connections to port 25. This will interfere with the EventSentry SMTP notification actions which sends emails using SMTP port 25. You will need to disable or customize the SMTP protection feature of your antivirus product to make the SMT...
You will need to take additional configuration steps when configuring EventSentry to access resources located on different computer. By default the EventSentry agent runs under the LocalSystem account. This is a builtin system account that has administrative permissions on the local host but usually has no permissions on remote computers....
