Overview

EventsManager cannot collect hardware events.

When collecting hardware events on Windows 2008 machines, the following error message appears under the Operational History:

Error opening event log on machine <hostname>, log Hardware Events.

Environment

EventsManager 2012 SR1 (20120214)

Root Cause

The Event Logs.xml.gz file is corrupt.

Resolution

1. Close the EventsManager console.
2. Stop both GFI EventsManager services.
3. Browse to ...\Program Files\GFI\EventsManager2012\Data\Settings\ESM Settings\Event Logs.xml.gz.
4. Rename the file Event Logs.xml.gz to Event Logs_OLD.xml.gz.
5. Download a blank Event Logs.xml.gz file.
6. Replace the Event Logs_OLD.xml.gz file with the new Event Logs.xml.gz that you have just downloaded.
7. Start both GFI EventsManager services.

NOTE: If you have custom logs, they will be lost when you replace the old Event Logs.xml.gz file.