Several Problems with EventsManager

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

Several Problems with EventsManager

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Networking & Security] >> GFI EventsManager >> Several Problems with EventsManager

Page: [1]

Message

<< Older Topic Newer Topic >>

Several Problems with EventsManager - 4.Feb.2009 6:41:44 AM

XGandalfXo

Posts: 2
Score: 0
Joined: 29.Nov.2007
Status: offline

Hi i've installed EventsManager to centralize the logs for around 75 Windows Server 2003.

No there are some problems.

1. Adding a custom log.

We have three different logs we want to add.

When i open the Windows Event Viewer i can see the names

Kaspersky Event Log
Enterprise Vault
Enterprise Vault Converter

I added these names for custom logs.
Kaspersky und Enterprise Vault Converter are working fine.
But i cant see any Events from Enterprise Vault.

Then i added the name i found in the Event Log Properties.
EVEventlog.evt

But i still cant see the events.

Any clue why?

Second Problem.

We are using the ReportPack to generate daily and weekly reports.

Can i create a Report with using Groups from the EventsManager?

I have a Group with 40 Memberserver and i didnt find the way how i can create a report using this group. I have to add all Server names manually.

Third Problem

I have created a Report to get events from yesterday every Day.
Now i want to create a Report to get the same events from the last week every 7 Days.

Can i copy a custom report? Didnt find a way.

At least...

I have created several classification rules so that every Warning and every Error should be classified.
Errors should be "High" and Warnings should be "Medium" but i still find Warnings and Errors marked as "Unclassified" When i check the rule for these Events i get a "N/A"

< Message edited by XGandalfXo -- 4.Feb.2009 8:18:21 AM >

Post #: 1

RE: Several Problems with EventsManager - 24.Jul.2009 8:57:51 PM

imatone

Posts: 204
Score: 0
Joined: 6.Aug.2007
Status: offline

I'm facing similar problem w/ Enterprise Vault 8. Which version of EV r U using?
Did/Have U ever get anywhere? TIA for sharing.

(in reply to XGandalfXo)

Post #: 2

RE: Several Problems with EventsManager - 27.Jul.2009 4:42:22 AM

DrewE

Posts: 1058
Score: 0
Joined: 28.Apr.2008
From: Cary, NC
Status: offline

Is GFI EventsManager able to retrieve Application, Security, and System events from these machines, but simply not the Enterprise Vault Logs?

_____________________________

Drew Easley - Technical Support Representative
GFI Software - www.gfi.com

(in reply to imatone)

Post #: 3

RE: Several Problems with EventsManager - 27.Jul.2009 5:28:45 AM

Arielle

Posts: 294
Score: 0
Joined: 15.Sep.2006
Status: offline

The Enterprise Vault key in the registry has a trailing space and this is why EventsManager is unable to collect these logs.

http://seer.entsupport.symantec.com/docs/311984.htm

If you edit the following registry key to remove the extra space in the end it should work fine.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Enterprise Vault

(in reply to DrewE)

Post #: 4