GFI EventsManager and Microsoft Windows Event Viewer use the same APIs to connect and retrieve Windows Event Logs from a remote computer. Therefore, to check if GFI EventsManager will be able to retrieve events from a remote computer, try to connect to the remote Windows Event Logs using Microsoft's Event Viewer.
To test connectivity, perform the following on the GFI EventsManager computer:
Open the Microsoft Windows Event Viewer from the Administrative Tools -> Event Viewer
- Right Click on Event Viewer (Local) and select Connect to another computer
- Enter the name/IP of the target machine
If connection successful and you can see the event logs on the target computer, then the connection is clear. If failure in connection, you will need to debug for the following possible obstacles:
- Firewalls on both the target machine (Personal firewalls like the Microsoft Firewall)
- Event Log Service not turned on either on the local computer on the target computer
- The computer is in a different domain. The Windows Event Viewer does not allow you to make use of alternative credentials to connect to the remote computer. You can configure alternative credentials in GFI Events Manager for a group of computers or for specific computers
- Permission issues on the target event log
- How does GFI EventsManager work?
- Cannot collect events from Windows Vista, Server 2008, or Windows 7
- How to test network connectivity and security permissions for GFI security products
- What security permissions are required for GFI EventsManager to collect events and logs from remote machines?
Other Related Articles: