Knowledge Base

The EventSentry dashboard includes the generic Search tile which can be used to display data from any page in the web reports e.g. syslog data. The Search tile also offers the ability to extract select data strings from events and display them in custom columns. This method can be applied to any type of event logged to the event log. This ...

KB-ID 559
Category: Web Reports

EventSentry Web Reports supports TwoFactor Authentication 2FA for builtin user accounts. When 2FA is enabled users enter their username and password as usual and then enter a onetime verification code sent to their email. This ensures that a stolen or shared password alone is not enough to access the profile. Enabling 2FA 1. In the We...

KB-ID 561
Category: Web Reports

Yes EventSentry Web Reports supports LDAP authentication allowing users to sign in with their Active Directory credentials. Overview: By default Web Reports uses builtin authentication where passwords are stored and managed within the application. For environments with a Windows Active Directory infrastructure enabling LDAP supp...

KB-ID 317
Category: Web Reports
Applies to: v3.0 or later

Note: These instructions are only for EventSentry 3.4 and newer. For older versions please see knowledge base article 238 Step 1: Prepare the Certificate Open a command prompt as an administrator and navigate to the following folder the directory may change depending on where you installed EventSentry: cd \Program Files\Ev...

KB-ID 371
Category: Web Reports
Applies to: 3.4 and newer

If the Forgot your password option does not work verify that you are entering your username and not your email address. If you aren39t able to use Forgot your password you can use one of the three options below to reset the password manually. Option 1: Automated reset script Only available for EventSentry 5.x and later NOTE: You ...

KB-ID 165
Category: Web Reports
Applies to: 3.0 and later

Backup Settings Your Web Reports settings are stored in this folder: C:\Program Files\EventSentry\WebReports\conf\ configuration.xml healthmatrix.xml jobs.xml preferences.xml reports.xml users.xml Note that if you have EventSentry installed in a custom location your settings will be located in the installdir\EventSentr...

KB-ID 258
Category: Web Reports
Applies to: 3.0 or later

If you receive an Application Error or you have been instructed by our support team to send your support logs please follow the instructions below. First navigate to your Web Reports instance then click Support in the very bottom right of Web Reports. Next click zip all logs to include all recent log files. If the W...

KB-ID 526
Category: Web Reports

Open EventSentry Web Reports Properties Launch cd C:\Program Files\EventSentry\WebReports\tools launchJvmSettings.bat Update Maximum Memory EventSentry Web Reports Properties Stop Service Click Java tab Increase the Maximum memory pool greater than 4096 MB General tab Start service amp...

KB-ID 364
Category: Web Reports
Applies to: 3.4 and newer

Certify The Webhttps://certifytheweb.com/ provides a way to easily manage install and autorenew free SSL/TLS certificates from letsencrypt.orghttps://letsencrypt.org/ and other ACME Certificate Authorities for your Web Reports instance. Step 1: Install Certify The Web Downloadhttps://certifytheweb.com/ and install Cert...

KB-ID 522
Category: Web Reports

Let39s Encrypthttps://letsencrypt.org/ is a free automated and open certificate authority brought to you by the nonprofit Internet Security Research Grouphttps://www.abetterinternet.org/ ISRG. Their service offers free TLS/SSL certificates and can be used with the EventSentry Web Reports. Step 1: Download the WinACME client ...

KB-ID 421
Category: Web Reports
Applies to: 4.1.1

Ubuntu Open Terminal sudo nano /opt/EventSentry/WebReports/web/bin/start.sh Edit Xmx export JAVAOPTS=Xmx4G Restart sudo /etc/init.d/eswebreportssvc restart

KB-ID 272
Category: Web Reports
Applies to: 3.0 or later

Yes when a scheduled job runs in the Web Reports an event is logged to the Application log with the source EventSentry Web Reports. These events may be used to trigger various actionshttps://www.eventsentry.com/documentation/help/html/targets.htm with EventSentry. Report Job Type: Information Event ID: 2000 Source: EventSentry Web R...

KB-ID 533
Category: Web Reports

Yes EventSentry Web Reports logs all authentication attempts successful and failed for auditing and security purposes. On Windows events are written to both the log file and the Application event log with source EventSentry Web Reports. Log File Location By default the authentication logs are located at: C:\Program Files\EventSe...

KB-ID 534
Category: Web Reports

Yes you may limit the number of failed attempts before an account is locked out of the Web Reports. Login to the Web Reports as an admin Click on the Settings icon and select Security ampamp Accounts On the left under Login Options click Lockout Policy Set the number of failed attempts allowed Set the number of minutes must w...

KB-ID 532
Category: Web Reports

If you are running your MSSQL database on the same machine as the EventSentry web reports EventSentryWebReports service then you may see an error message similar to the one shown below after the machine has been rebooted when you try and access the web reports. The error message indicates that a connection with the database could not be e...

KB-ID 340
Category: Web Reports
Applies to: All

Each user account has the ability to set the default page and subsequently a default search in the web reports under their user account. Configuring the default page for a user Under Security ampamp Accounts you may set the default page for a user account. By default each user will load the Network Dashboard. In the web reports: ...

KB-ID 499
Category: Web Reports
Applies to: 3.0 or later

If TLS is enabled in the web reports then it39s likely that all TLS versions TLSv1.0 TLSv1.1 and TLSv1.2 are active and being accepted. Follow the steps below to disable older versions of TLS v1.0 and v1.1 which is generally recommend and may be required for security and/or compliance reasons as well. After completing the steps below only ...

KB-ID 459
Category: Web Reports
Applies to: 3.4 and newew

Step 1: Prepare the Certificate Open a command prompt as an administrator and navigate to the following folder depends on where you installed EventSentry: cd \Program Files\EventSentry\WebReports\jre\bin Step 2: Use a Certificate Authority Keystore Run the following command to generate a keystore: keytool.exe genkey alias events...

KB-ID 438
Category: Web Reports
Applies to: v3.0 or later

EventSentry is not affected by the Log4Shell. See below for a list of all EventSentry components: EventSentry Agent: Does not use Log4j not vulnerable EventSentry Heartbeat Agent: Does not use Log4j not vulnerable EventSentry Network Services: Does not use Log4j not vulnerable EventSentry Web Reports: Uses Log4j however does not use af...

KB-ID 461
Category: Web Reports
Applies to: all versions

Open EventSentry Web Reports Properties Launch C:\Program Files\EventSentry\WebReports\tools\launchJvmSettings.bat EventSentry Web Reports Properties Click Java tab Add the following based on your location batch Duser.language=en Duser.region=US

KB-ID 268
Category: Web Reports
Applies to: 3.0 or later

Note: These instructions are only for EventSentry 3.0 to 3.3 for version 3.4 and newer please see knowledge base article 371 Step 1: Prepare the Certificate Open a command prompt as an administrator and navigate to the following folder depends on where you installed EventSentry: cd \Program Files x86\EventSentry\WebReports\jre\bin...

KB-ID 238
Category: Web Reports
Applies to: v3.0 to 3.3

The EventSentry dashboard includes the generic Search tile which can be used to display data from any page in the web reports e.g. event log data. The Search tile also offers the ability to extract select data strings from events and display them in custom columns. This method can be applied to any type of event logged to the event log. H...

KB-ID 464
Category: Web Reports
Applies to: 4.2 and later

You can optimize the performance of a new database by setting the initial database size to a large number for example 2Gb. You can also set the new or existing database39s autogrowth size in relation to your daily growth rates. For example if your database grows 1GB per day you should change the database autogrowth setting to be 1GB or to ch...

KB-ID 35
Category: Web Reports

If you use the builtin Postgres database you may need to optimize it: https://www.eventsentry.com/kb/232 If you use Microsoft SQL as your database you may need to optimize it: https://www.eventsentry.com/kb/35 If the recommended optimizations do not help please contact our support department for more indepth assistance. If you have an Ev...

KB-ID 6
Category: Web Reports
Applies to: All

Yes it is possible to use IIS as a front end to the Web Reports. IIS can receive requests and delegate them back to our Web Reports instance running on a custom port. 1. Install Application Request Routing ARR You can obtain the installer for the ARR IIS7 extension at https://www.iis.net/downloads/microsoft/applicationrequestrouting...

KB-ID 285
Category: Web Reports
Applies to: 3.0 or later