Overview
Fields from events collected from Server 2012 or Windows 8 machines are not displayed.
Events will be collected but no event details other than the monitored machine, event id, rule name will be displayed. Example alert emails look like this: Subject: Security ID: Account Name: Account Domain: Logon ID: Account that was locked out: Security ID: Account Name: .......
Environment
EventsManager 2013 (20130116)
Resolution
A fix for this issue was released via auto-updates (Patch ID 20140120). Please make sure of the following:
- Confirm that auto-updates are enabled.
- Verify that auto-updates are occurring successfully.
- Verify that the patch mentioned above is applied.