myITforum and Windows IT Pro Forums

 Setting up Windows Event Forwarding...

Author Message

  • Total Posts : 1
  • Scores: 0
  • Reward points : 650
  • Joined: 8/31/2017
  • Status: offline
Setting up Windows Event Forwarding... Thursday, August 31, 2017 7:17 PM (permalink)
OK, I have WEF up and running on our network, currently, I have it running with my laptop and the WEF server, works great.
I have a test laptop, configured exactly like all the desktops on our domain but I can’t get the events to pop into the WEF server, it shows in the list of ‘active’ subscriptions.
I have it configured just like my personal laptop –
1) Winrm set to running but not listening.
2) Computer>Policies>Admin Templates>Windows Components>Event Forwarding>Configure target subscription manager
This will need to be populated with the address of your collector server in this format :
3) Added the Local Network Service to ‘Event Log Readers’ Group
But on the WEF Server test laptop is listed as ‘active’ in the subscriptions.
And On the Test Laptop
Test-NetConnection WEFSERVER -Port 5985 – this test is successful, nothing blocking connection
But still no events in –
Eventlog-Forwarding Plugin -> Operational – No events in here
I don’t see what I am missing… any thoughts?
*it’s windows 10, I don’t know if that makes a difference or not.
*also, I started the winrm from services.msc because I don’t want the listener turned on, not sure if that makes a difference.
    Online Bookmarks Sharing: Share/Bookmark

    Jump to:

    Current active users

    There are 0 members and 2 guests.

    Icon Legend and Permission

    • New Messages
    • No New Messages
    • Hot Topic w/ New Messages
    • Hot Topic w/o New Messages
    • Locked w/ New Messages
    • Locked w/o New Messages
    • Read Message
    • Post New Thread
    • Reply to message
    • Post New Poll
    • Submit Vote
    • Post reward post
    • Delete my own posts
    • Delete my own threads
    • Rate post

    2000-2018 ASPPlayground.NET Forum Version 3.9