MonitorWare Knowledge Base

How do I troubleshoot ER? I have version 6 on a W2K Server with SP 3. I am not getting syslog messages when Events occur. Using a protocol analyzer, I was able to determine that the W2K server is not sending anything to the syslog server. I have supplied the IP address of the syslog server under Forward Syslog for both the Rule Set and Default Actions. Where do I go to troubleshoot?

Hello,

You could see the Debug.log file. For that you would have to enable it in "Debug Options"

Secondly, please check the following things.

1. You have selected the *same* ruleset in the EventLogMonitor Service that contains the forward Syslog rule. (if you have defined 2 rulesets, then what i mean to say is that the wrong ruleset is selected for the EventLogMonitorService
2. You have entered the correct IP address in the forward Syslog action.
3. You have entered the correct port in the forward Syslog action. This port should be *exactly* the same as that of the port on which WinSyslog is listening (see that port number in WinSyslog Settings)

Also do the following.

Go to the Windows Event Log and see what error messages (if any) are logged by EventReporter in Application Event Log.

I hope this helps. If still your problem persists, then kindly send us your debug.log file and your registry file (go to computer menu -> Export Settings to Registry File ->save it) on support@adiscon.com. Also send us the registry file of WinSyslog. Also tell us what error messages are logged by EventReporter in Windows Event Log (if any)

We will create a lab with *exact* same settings as yours and see what is the probelm.

If you have any other questions, please dont hesitate to contact us.

Best Regards
Wajih-ur-Rehman
Adiscon

I'd tried all those tricks but when I started the service the system informs me that an error (1067) has ocurred. No debug information is generated.

Hi,

could you kindly send me a registry export fo your settings to support@adiscon.com? You can use the computer menu in the EventReporter Client to export the settings.