TroubleShooter Wizard and other problems
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
TroubleShooter Wizard and other problems - 20.Dec.2006 9:54:53 AM
|
|
|
jsammari
Posts: 10
Score: 0
Joined: 12.Oct.2006
Status: offline
|
When I run the TroubleShooter Wizard it's telling me the following things.
1. The Processor service user does not have administration priv's.
2. Processor service user does not have read/write permissions on the Data subfolder.
3. Processor service user does not have read/write permissions on the DebugLogs subfolders.
The service was installed using our domain admin account and I tripled checked all permissions on it's folders. When I invoke the service account using the local system account, errors 2 and 3 above do not occur. I've reinstalled several times using the latest build, 20061214.
I also noticed when downloading event logs from a large quantity of machines, the events are processed for a short time and then the collection will begin to fail. This has happened on for each install that I have done.
We are running GFIEvents Manager on Windows 2003 Server with SQL 2000.
Any help would be most appreciated.
Jeff
< Message edited by jsammari -- 20.Dec.2006 10:38:12 AM >
|
|
|
|
RE: TroubleShooter Wizard and other problems - 20.Dec.2006 11:12:08 AM
|
|
|
Arielle
Posts: 295
Score: 0
Joined: 15.Sep.2006
Status: offline
|
Hi Jeff,
There is a known issue with the troubleshooter. If you have made sure that the service account has administrative rights, then you should ignore the troubleshooter message.
How does the collection fail? Do you get any errors in the Operational History? If you do, what are these errors?
_____________________________
Arielle Bonnici
GFI Blog: http://www.gfi.com/blog – Follow Us (Twitter): http://www.twitter.com/gfisoftware – Watch Us (YouTube): http://www.youtube.com/gfisoftware
|
|
|
|
|
RE: TroubleShooter Wizard and other problems - 20.Dec.2006 11:14:43 AM
|
|
|
jsammari
Posts: 10
Score: 0
Joined: 12.Oct.2006
Status: offline
|
Hi Arielle,
The error I'm getting in the Operational History windows is, "unable to process event ID's"
This will continue on until I manually stop the service in Task Manager.
Jeff
|
|
|
|
|
RE: TroubleShooter Wizard and other problems - 21.Dec.2006 9:24:59 AM
|
|
|
jsammari
Posts: 10
Score: 0
Joined: 12.Oct.2006
Status: offline
|
Arielle,
Unfortunately the network that GFI resides on does not allow me to export any sort of file. I will tell that after enabling debugging and running a full scan again, the error reappeared. The only file in the DebugLogs directory that shows repeating errors is the EvtCollector.csv file. When the failure begins, the following error is recorded over and over again.
Date: 12/21/2006
Time: 8:57_04
Milliseconds: 261
Log Level: 1
Process ID: #000017d0
Thread ID: #0000014
Event Type: error
Source: Extractor
Description: ERROR: error finding the extractor
Hope this helps, if you need more information please let me know.
Thanks,
Jeff
|
|
|
|
|
RE: TroubleShooter Wizard and other problems - 11.Jan.2007 10:42:37 AM
|
|
|
jsammari
Posts: 10
Score: 0
Joined: 12.Oct.2006
Status: offline
|
I received this email from your tech support team on this issue.
"I got some feedback from our developers today. This is a known issue where ESM has a problem with loading the processing rules. A new build will be released later this month which will resolve the issue. I recommend that you sign up for build notifications (If you haven't already) so that you can be sent an email when the new build is released."
< Message edited by jsammari -- 11.Jan.2007 10:44:07 AM >
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
