Overview
This article provides information regarding Event ID 10000 with Event Source: GFI EventsManager.
Information
The Event ID 10000 with Event Source: GFI EventsManager is an event that occurs on the machine where GFI EventsManager is installed. This is also when the GFI EventsManager audit feature is enabled and cannot write an audit event to an event source's event logs (check if the audit option is disabled). This can occur when the targeted device of the collection is offline or unavailable. The Event ID 10000 will show the target machine in the event details. This target machine name should show in the 'computer' field.
Following the Event ID 10000 on the machine where GFI EventsManager is installed, there will be an audit event that would usually write to the event source's event log. This shows the details of the audit check for that device.