Trial Installation (Full Version)

All Forums >> [Networking & Security] >> GFI EventsManager



Message

74HCT245 -> Trial Installation (27.Jun.2009 8:58:27 AM)

Hello,
I'm trying EventsManager on my pc (local test) and I can have only 2000 events for each registry event (application, security, system).
But now in windows event viewer mmc on my pc I have 9755 events in Application and 7076 events in Security and 4076 in System
If I get "Reset and scan Now" then I have double the same 2000 event for each (they will be 4000 and so...)
If I get "Scan Now" never appens.
My pc is in "Default Group" and I have settings this group to "Archive all logs without any further processing".
Now my tests are stopped. I need to acquire all events then I will do test about special filter for me.
Thanks
P.S. compliments, this product is very useful and I hope to do best configuration for my company




DrewE -> RE: Trial Installation (29.Jun.2009 8:32:19 AM)

I'm not sure I completely understand the issue here. What type of SQL database are you using? Could it be SQL Express?

Also, these steps might be what you are looking for:
http://kbase.gfi.com/showarticle.asp?id=KBID002857



74HCT245 -> RE: Trial Installation (30.Jun.2009 8:23:03 AM)

I use sql2005 express sp3.
1) after the installation of EventManager I have not any events in Events Browser. I have to do "reset and scan now" then I have only 2000 events in EventManagerBrowser.
2) My pc in test have very events in the registry but in Events Browser I have not all.
3) I have configured the EventManager to log all events of the 3 registry of windows (security. application, system) but i see only last 2000 events
4) In EventManager I see only events about day 17 june 2009 the events of the other days there is not In EventManager.
5) the security events in EventManager Browser are double (one for category (2) and the same event for category (4))
6) I have changed the xml file (http://kbase.gfi.com/showarticle.asp?id=KBID002857) but not seem to work and I have ever 2000 events...

It is possible the italian language support for the trial period?
Thanks a lot

Roberto



DrewE -> RE: Trial Installation (30.Jun.2009 8:30:32 AM)

How large is the SQL database currently?



74HCT245 -> RE: Trial Installation (30.Jun.2009 12:39:06 PM)

The database is 13 Mbyte.
Note: the Application events are not collected (0 event in the browser)
The EventsManager status have 5330 Windows Events but in my pc now there are about 23000 events for the 3 registry events.
I have uninstalled (3 time) the program and all time I have deleted the database, then I have reinstalled the program and recreate the database.
This my trial system do not collect all the event and the security events are double....
Tomorrow I try to install in my pc in the office (this installation is on my home pc....)
Thanks



srmobile -> RE: Trial Installation (15.Jul.2009 2:34:17 PM)

quote:

ORIGINAL: DrewE

I'm not sure I completely understand the issue here. What type of SQL database are you using? Could it be SQL Express?

Also, these steps might be what you are looking for:
http://kbase.gfi.com/showarticle.asp?id=KBID002857



Drew, I am having the same issue. Yes I am running SQL Express.

"Step 4: 4.Locate the file 'Advanced Settings.xml.gz' and double click on it to extract the XML file. "

Double clicking works when there is a program associated with the extention, in my case on a fresh Windows 2003 Server, there is nothing. Notepad yields nothing, but as I understand this is a form of compression.

Let me know so I can proceed.

Thanks,

SR



DrewE -> RE: Trial Installation (15.Jul.2009 3:36:23 PM)

To extract the .gz file you will need an application such as 7-zip. Once you change the contents, don't forget to GZIP the file again.



Page: [1]