myITforum and Windows IT Pro Forums

 Setting up Windows Event Forwarding...

Author Message
mathurin68

  • Total Posts : 1
  • Scores: 0
  • Reward points : 650
  • Joined: 8/31/2017
  • Status: offline
Setting up Windows Event Forwarding... Thursday, August 31, 2017 7:17 PM (permalink)
0
OK, I have WEF up and running on our network, currently, I have it running with my laptop and the WEF server, works great.
I have a test laptop, configured exactly like all the desktops on our domain but I can’t get the events to pop into the WEF server, it shows in the list of ‘active’ subscriptions.
I have it configured just like my personal laptop –
1) Winrm set to running but not listening.
2) Computer>Policies>Admin Templates>Windows Components>Event Forwarding>Configure target subscription manager
This will need to be populated with the address of your collector server in this format :
Server=http://WEFSERVER:5985/wsman/SubscriptionManager/WEC,Refresh=180
3) Added the Local Network Service to ‘Event Log Readers’ Group
…nothing.
But on the WEF Server test laptop is listed as ‘active’ in the subscriptions.
And On the Test Laptop
Test-NetConnection WEFSERVER -Port 5985 – this test is successful, nothing blocking connection
But still no events in –
Eventlog-Forwarding Plugin -> Operational – No events in here
I don’t see what I am missing… any thoughts?
*it’s windows 10, I don’t know if that makes a difference or not.
*also, I started the winrm from services.msc because I don’t want the listener turned on, not sure if that makes a difference.
Thanks!!
 
 
#1
    Online Bookmarks Sharing: Share/Bookmark

    Jump to:

    Current active users

    There are 0 members and 3 guests.

    Icon Legend and Permission

    • New Messages
    • No New Messages
    • Hot Topic w/ New Messages
    • Hot Topic w/o New Messages
    • Locked w/ New Messages
    • Locked w/o New Messages
    • Read Message
    • Post New Thread
    • Reply to message
    • Post New Poll
    • Submit Vote
    • Post reward post
    • Delete my own posts
    • Delete my own threads
    • Rate post

    2000-2017 ASPPlayground.NET Forum Version 3.9