Overview

Fields from events collected from Server 2012 or Windows 8 machines are not displayed.

Events will be collected but no event details other than the monitored machine, event id, rule name will be displayed. Example alert emails look like this: Subject: Security ID: Account Name: Account Domain: Logon ID: Account that was locked out: Security ID: Account Name: ....... 

Environment

EventsManager 2013 (20130116)

Resolution

A fix for this issue was released via auto-updates (Patch ID 20140120). Please make sure of the following:

• Confirm that auto-updates are enabled.
• Verify that auto-updates are occurring successfully.
• Verify that the patch mentioned above is applied.