NT Event Log

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Jan 18, 2008 9:19 am

Nadir wrote:All events logs generated by Trend server Protect do not display correctly it's for that I've copied the appripriate dll (EventMsg2.dll) in hostMonitor directory. I have restart AHM but it doesn't change anythings.

You should create EventLogDlls subfolder in HostMonitor's folder and copy appropriate dlls there (e.g. C:\Program Files\HostMonitor6\EventLogDlls\EventMsg2.dll).

Regards,
Max

Nadir · Post by **Nadir** » Fri Jan 18, 2008 9:36 am

Done...

Must I restart AHM service?

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Jan 18, 2008 9:51 am

Nadir wrote:Must I restart AHM service?

Not sure it is necessary.

Regards,
Max

Nadir · Post by **Nadir** » Fri Jan 18, 2008 9:59 am

Still same issue

KS-Soft · Post by **KS-Soft** » Fri Jan 18, 2008 10:12 am

What exactly means "do not display correctly". What message do you see?

Regards
Alex

Nadir · Post by **Nadir** » Fri Jan 18, 2008 10:25 am

I see

Message not found. Insertion strings:E:\I386\SQLRUN.CAB, master.mdf.CC1A8C58_27D1_4D38_BF1B_C0A5CBB90616, 2

Instead of

The compressed file "E:\I386\SQLRUN.CAB" contains a file "master.mdf.CC1A8C58_27D1_4D38_BF1B_C0A5CBB90616" that is larger than 10MB. The file was skipped by manual (task) scan.

KS-Soft · Post by **KS-Soft** » Fri Jan 18, 2008 10:35 am

Then you are right, this message appears when HostMonitor cannot locate or load appropriate resource DLL. Are you sure Trend server Protect uses EventMsg2.dll for this message? May be it uses several DLLs? Could you find "The file was skipped by manual (task) scan" string in EventMsg2.dll?

Regards
Alex

Nadir · Post by **Nadir** » Fri Jan 18, 2008 10:44 am

Are you sure Trend server Protect uses EventMsg2.dll for this message? May be it uses several DLLs?

Yes I have seen it in registry key

Could you find "The file was skipped by manual (task) scan" string in EventMsg2.dll?

Yes I can

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Jan 18, 2008 11:10 am

In fact, we cannot reproduce the problem. Could you try the following trick? You should open Registry editor on remote machine, and export the key, located under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\<log name>\<event source name>
Import this key onto machine, where HostMonitor is running and copy EventMsg2.dll and other dlls, specified under EventMessageFile value name into appropriate folder.

Regards,
Max

Nadir · Post by **Nadir** » Mon Jan 21, 2008 3:57 am

Maybe it could help, I have AHM 6,54 installed but path is C:\Program Files\HostMonitor5\ !!

I thinks it's because I have upgrade from version 5

KS-Soft Europe · Post by **KS-Soft Europe** » Mon Jan 21, 2008 4:31 am

Nadir wrote:Maybe it could help, I have AHM 6,54 installed but path is C:\Program Files\HostMonitor5\ !!

So, is the problem solved? Could you confirm that?

Regards,
Max

KS-Soft · Post by **KS-Soft** » Mon Jan 21, 2008 7:20 am

Maybe it could help, I have AHM 6,54 installed but path is C:\Program Files\HostMonitor5\

"EventLogDlls" directory should be created in HostMonitors home folder.
If you have installed HostMonitor into "C:\Program Files\HostMonitor5\" directory then full path to EventLogDlls should be C:\Program Files\HostMonitor5\EventLogDlls

Regards
Alex

Nadir · Post by **Nadir** » Mon Jan 21, 2008 7:51 am

Not solved

KS-Soft Europe · Post by **KS-Soft Europe** » Mon Jan 21, 2008 8:18 am

Nadir wrote:Not solved

Hm. Is the test performed by HostMonitor itself or by RMA?
Could you install RMA on the target machine in order to perform this test localy by RMA?

Regards,
Max

Nadir · Post by **Nadir** » Mon Jan 21, 2008 9:03 am

Hm. Is the test performed by HostMonitor itself or by RMA?

By RMA

Could you install RMA on the target machine in order to perform this test localy by RMA?

Done , I'm waiting for logs...