Event Log test "unknown"

Nick Danger · Post by **Nick Danger** » Fri Dec 12, 2003 12:31 pm

I have a number of different tests which are performed against a server. The DNS service test works, the Login service test works, the UNC directory test works, but an Event log test returns "unknown."

It does this regardless of who I "connect as." Configuring the test (selecting an Event log, selecting an Event ID, etc.) all suggest that HM is talking to the server...

Any suggestions would be appreciated.

Nick Danger · Post by **Nick Danger** » Fri Dec 12, 2003 12:47 pm

...the server is W2K...

KS-Soft · Post by **KS-Soft** » Fri Dec 12, 2003 2:52 pm

H'm, so HostMonitor does not display any error when you select "Event Log", "Event Source" using combo boxes? But displays "Unknown" status for the test..
Its strange. What version of HostMonitor do you use? Test performed directly by HostMonitor? Or it uses RMA?

Regards
Alex

Nick Danger · Post by **Nick Danger** » Wed Dec 17, 2003 6:30 am

That's odd...when I first created this test, I didn't get this error at all. In fact, it did a little pause before it showed the drop down list which made me think it was really connecting to the other server before showing the drop list of logs or Event sources.

But now when I drop down either of those list boxes, I get the error:

Cannot retrieve list of Event Log sources from \\servername (System).
Will be used local system list

Thanks.

Nick

KS-Soft · Post by **KS-Soft** » Wed Dec 17, 2003 12:46 pm

Nick,

That's odd...when I first created this test, I didn't get this error at all. In fact, it did a little pause before it showed the drop down list which made me think it was really connecting to the other server before showing the drop list of logs or Event sources.

If HostMonitor did not show error, it means there was no error. Something changed. Probably you changed account that is used by HostMonitor? HostMonitor needs power user account to perform NT Event Log test but it needs admin account to retrieve list of log sources. Also it needs to have access to remote registry, probably "Remote Registry" service stopped on that server?

What about my questions? Version of HostMonitor and how it performs this test (by itself or using RMA)?

Regards
Alex

Nick Danger · Post by **Nick Danger** » Thu Dec 18, 2003 10:21 pm

Oops...version 4, not RMA.
Hmmm...I tend to keep trying different things until it works, so I probably did try admin and then also other accounts with less access.
Will need to verify but yes, remote registry is probably stopped.
So it sounds like Admin rights and remote reg should do the trick.
Cheers.

Nick