EventLog Analyzer not sending logs via email
Hello, I have configured EventLog Analyzer to sent emails on certain syslog messages but it doesn't send them. In mail server configuration I can sent test mail successfully. I have configured Alert Profile with Custom Alerts and for testing purpose there is configured LogType Any and Severity also Any. On Profile page there are many generated alerts with Status Failure. The device whith send log is Cisco ASA. Could you please help me with this issue.
problem with license
dears. i have a one problem/question. why my manage server didn't get the license from admin server? can anyone help me with this. thank you beforhead.
No Data Found?
I have EventLog Analyzer installed for evaluation on a Windows Server 2008 R2 box and have added some hosts. Everything works properly since today, now when I try to check the errors or warnign logs for soime host (Linux or windows it's indifferrent) I receive the pop-out window says "No Data Found" (if Ichange the timeframe to yestarday I can see some data). Please let me know something because I'm evaluting the product and apart this small issue seems very interesting. I know I have to send you
emails are not sending on alerts
Hello there, I have problem with sending emails on Alerts. I have configured new Alert Profile which should sent syslog messages to mail server, by matching only Severity which is "Alert".Cisco ASA is actually sending syslog messages. Mail server settings are configured properly because test mail messages are sending well. On Alert page I see generated Syslog but on Status it indicates Failure. On firewall I see many connection attempts from syslog server to mail server, but actual mail messages
ELA User Based Report
After I created and scheduled a NEW user based report, by selecting from drop down menu, host and users, we are unable to edit it by clicking on the newly created report name. For example I need to add a new user. how to add a new user in a previously created and scheduled user based report?
ELA not showing created users in user Management
I installed ELA x64 on Windows 2008 Server R2. I created several users using User Management but I cannot see any of them on the interface! Any Ideas? Regards
eventlog analyzer user-admin guide
Product eventlog analyzer user-admin guide: structure update place actual and useful information in the guide implement search function(web based guide)
Custom Report definition: Regular expression supported ?
Hi there, I'm evaluation Eventlog Analyzer 7.2 on Windows Server 2008 R2 and I'm wondering if in the alert definition section there is the possibility of using regular expressions in "Log message contains" field. In affirmative case, which ones are supported? Thx and regards, Rui.
Eventlog Analyzer not collecting data from Cisco ACS 4.2 server
Hello, I'm trying to send my Cisco-ACS log messages to Eventlog Analyzer. I configured ACS and the server popped up in the host table in Eventlog Analyzer. However, it keeps showing that there are no logs even though that is not the case. Just to test, I had ACS send the logs to another Syslog server and the logs started coming across right away. I've verified the IP address and port number in ACS. Eventlog Analyzer and ACS can ping each other. What am I missing here? I even tried to view the
Can't Bind to port 513,514
Can't Bind to port 513,514 frequently comes up and the only application occupying these ports on the ELA is the ELA. But there a few ELA process opened automatically not just one. I also see the below entry in the server log's able 'eventlog.comp_eventlog_hr_trend' doesn't exist Has any one come across this error and if so have you been able to fix it?
relation between fault and map
I want to go to the corresponding map with selected node with double click on an event. I tried to use: <MENU-ITEM name="Open Submap" action_type="openpanel" action_value="MapApplet?OPEN_MAP=192.168.100.0"/> i works fine for "ipnet" but in "network events" I get the following error: The specified panekey is not correct 192.168.100.0 No Panel registered for node 192.168.100.0 I dont have any idea about panekey! If any one could help to create what I want I will be thank full. regards ali amiri
SysEvtCol does not start
When start service "ManageEngine Eventlog Analyzer 7.0" on WINDOWS 2008 R2, SysEvtCol start and stop returning the subsequent error inside file eventlog.out Connecting to driver failed Error in opening DB Connection 2 If you start the application from Menù (run.bat), all seem to work except that events are never written on DB. The version installed was 7.2 with MSSQL Database I removed the ver. 7.2 and install 7.0. Same problem for the SysEvtCol program (isn't started if launched as a service) but
Can not import apache web access log ？
import access log error：can not support the log file
Iseries/AS400 journal elaboration
I'm testing event log analyzer before buying, it's an interesting product, We have an eterogenous technological enviroment: Windows, Linux Centos, Cisco Asa, Checkpoint, Vmware , IBM Iseries... RIght now I'm stuck on ISeries logs, because I need to log some security information of our Iseries (OS V5R4), to achieve the best result I need the information present in the security audit journal (I have enabled the audit option) Is it possbile to eleborate the security audit journal in some way? Thanks
Print Audit report
Hello, We would like to create a report based on the event log of the print server to report the printer usage per user based on this event log information (event 10 in system info) is it possible ? Event Type: Information Event Source: Print Event Category: None Event ID: 10 Date: 26/04/2012 Time: 11:01:52 User: Computer: server Description: Document 155, factuur_layout.xlsx owned by users was printed on Vario Print 1075 - Unsecured Printing - 11th floor via port xx.xx.xx.xx:oce-10thfloor. Size
Alert - Run Program - Multi Space Argument
Hello, I'm trying to pass this argument to my script: Error On Production However, the script only picks up "Error". Do I need to enclose Error On Production with quotes, or is this not possible? Or is it a problem with my script? Kind Regards, Steve
Problems receiving Unix Syslog audit data packets
I have Eventlog Analyzer 7.2.2 installed on a Windows XP sp3 PC (Dell Optiplex 980) I have Red Hat Enterprise Linux 5.7 installed on a Dell Optiplex 990 PC. I have a 4 port Linksys router setup so that the 2 PCs can talk. I have a RHEL 5.7 Samba connection setup which allows the 2 PCs to share folders and files. I have to login the RHEL 5.7 PC from Windows XP PC as root I can list the files and folders on the RHEL 5.7 PC in Windows Explorer I cannot generate my first Syslog report or import Syslog
admin password lost
Hi Could you please send me the admin password reset procedure? Cheers
Global credentials, and email notifications when access denied
It took me a while to figure out what service was causing hundreds of bad password attempts until I found EventLog Analyzer had some invalid credentials. First of all, please add a feature to manage global credentials, for example the Windows domain administrator or the Cisco enable password. Currently I do not see any way to change the username/password on dozens of servers except for manually editing each one at a time. Also, the "Alert Me" function should include access denied notifications. I
Import Hosts
We're going into our second phase of testing ELA (which looks really good so far), but now I have to add another 50 hosts to be monitored. Is there any way to import them from a list? When we go live we're looking at something like 250 servers in the first production phase, and if we go with all servers that's over 600 machines to be entered. There's got to be a way to automate this.
error uninstalling Eventlog Analyzer
when trying to uninstall the eventlog analyzer (I have to change the management server...) there is this Eventlog\bin\wrapper.exe left that cannot be deleted because it seems to be in use, although I cannot find a handle locking the program. How to get rid of it...? Thanks. Ralf
How to set the number of hosts displayed and sorting type for "default view"?
I would like to have EventLog Analyzer open all the time on a large screen. I want to set the default view on the Home page to show 50 hosts, sorted by number of Errors in descending order. I also would like it to automatically refresh the screen every 10 minutes, and leave my session logged in. I can already do this in OpManager, but I don't see these options in Eventlog. Also, as a feature request, when I set it to show 50 hosts, it creates a frame that I have to scroll. I would like to be able
Syslog messages are downshifted and displayed in all lower case
Hello, Why are log messages downshifted and displayed in all lower case? How about leaving them in the format they were received? ELA build 7020 . Trial version. just installed. TIA.
Problems to import logs to EventLog Analyzer v7
I setup a trial version of ELA v7 in a W7 Pro x64, w/4GB RAM. Installation went well but when tried to import a few archived Security event logs 64MB or 100MB from a Windows 2003 server, the status always shows "In Progress" but, nothing being imported, even wait for a few hours. Tried to import from a local folder and also tried from a ftp site with same result. I have checked "C:\ManageEngine\EventLog\server\default\imported_files" and saw files are there, after using "Remote Host" with ftp info.
Change the format of the reports??
Hello I wonder if you can change the format of the reports, I want remove the logon id field, for example: The image is of a user logoffs report, in the report appears several times the same user with the same details except for logon ID, as shown. I want the user appears only once and the time it closed its session, when he finished his work schedule.
don't show me information about the failed login or Unsuccessful Login Attempts...
Hello I need to monitor the active directory, the report appears all: Accounts created, disabled, password reset, etc.. But do not show me information about the failed login or Unsuccessful Login Attempts, Why? I have the eventlog analyzer version 7.2
How to access archive events?
Hello, I am completely new to the EventLog Analyzer application so please bear with me. The company I work for has requested event information for a specific user to find out when they have logged into the domain. Having played with the application for a short while I managed to create a report to look at login events for the user in question - the problem was I could only go back around approx 30 days. They wish to look at event going back to December 2011 so my question is how do I go about searching
Event Log Analyzer High CPU % After latest update
Since updating ELA to the latest build, we are constantly getting Java32.exe at 100% messages. We need this resolved ASAP as its driving us crazy. Server 2008 R2, SP1 4GB RAM (MySQL Buffered to 1500M) 1 x Intel Xeon 2.8GHz
EventLog Analyzer 7.2 versus windows firewall
Product version EventLog Analyzer 7.2 EventLog server connected to the domain. Unable to get logs from stand alone server win 2008 r2 64 bit which is not part of a domain. Authentication fails. Used admin account from that server as well as account that used for log gathering "log viewer". Problem seems to be with windows firewall configuration on the that stand alone server(cause tried with another one without firewall, result is OK) What service should be allowed to connect to on the
Performance Testing - Windows
Our performance group is trying to capture the impact of event collection on our Windows hosts. Specifically, what service(s) on a Windows host are impacted during the collection & sending of events to the Event Log Analyzer server?
Manage Engine ELA Java Heap Space errors
I am getting Java Heap Space errors when trying to run very small custom reports (less than 400 events on a single host). We are running Manage Engine ELA v7.0.0 on a Windows 2008 64-bit server. What is the recommended solution to this issue? Message : Java heap space Stack Trace : Stack Trace is not available JVM Memory Information Total JVM Heap Size 502 MB Used JVM Heap Size 368 MB Free JVM Heap Size 134 MB Max Memory For JVM 502 MB Processors available to JVM 8
Using SQL Database for backend - Questions
I am thinking about using our MS SQL server as the database for our EventLog Analyzer install. I have a few questions about this: 1. What happens if the MS SQL server goes offline? Will the EventLog Analyzer hold the data locally until the database server is back online or will the events be lost until the SQL server comes back online? 2. Will Eventlog Analyzer automatically reconnect with the database when the SQL server comes back online? 3. Will Eventlog Analyzer still Archive events from
Need a report to pull the total and per user lockout totals for a custom period from the domain.
Need a report to pull the total and per user lockout totals for a custom period from the domain. i do not want the events listed just a Total and Per User total. Example Total Locked out users for Custom time period is = 296 Users Locked out Jdoe = 7 times Jdane = 10 times jsmith = 5 times and so on. Is there a report to do this? I am running Event Log Analyzer 7
Eventlog Analyzer on Redhat 6 - (Time is off by 1 hour)
System time is correct. All time stamps for alerts are off by 1 hour. Checked all settings with time regarding operating system and check traffic going to and from NTP server. The alerts are timestamping 1 hour from the time the event actually happened. Any assistance regarding this would be appreciated. This is a brand new install with the latest version. Just downloaded on September 8, 2011.
EventLogAnalyzer7.0 64bit cannot run in CentOS6
RT,because CentSO6 had the rsyslog default,not syslog.
export to csv problem
Hi, i've been struggling for a very long while trying to export a custom report in csv in order to analyze it with excel or access. What tricked me was the almost unexplicable behaviour of the exporting engine, wich usually breaks some records by inserting crlf followed by some "explanatory" data, then following with the rest of the record content. Apparently, this behaviour is due to the fact that the exporting engine does not considers that exporting to csv does not needs to be formatted as a "printable
Save Queries to CSV File
I am trying to save the results of my query to a csv file. Here is a sampling of the following command: select * from archives into outfile('c:\archives.csv') I never received an error message, however the file is never created. Thank you for your help.
Create Table via Web Interface to MySQL
I am attempting to create a custom database and tables, but I keep getting a syntax error. Here is the command: CREATE TABLE test (name VARCHAR(20)); Please help.
No Data Found?
Recently when using EventLog Analyzer, when we click on a particular service, event, count, etc. Anything that would bring up the detailed pop-out window, the pop-out window says "No Data Found". Regardless of time frame or range, same thing for everything. Any ideas? Im not sure where to begin.
BackupDatabase
Hola, i have questions regarding script of backupdatabase in Eventlog analyser i dont know which script i can use for to do backup of database ? there is 2 there 1) Eventlog/tools / backupdatabase.bat 2) Eventlog/troubleshooting/backupDB.bat 1) What are the difference between this 2 scripts and which script i should use to do backup and restore if there is any future problem with Eventlog ? 2) Why i need to stop Eventlog server to take backup ? can not i do realtime backup using this scripts i m
Next Page
