In this article  :

• Issue description

• Prerequisites

• Possible causes

• Resolution

• Related topics and articles

• How to reach support

Issue description  

The error message Event data directory size limit exceeded occurs when the ADAudit Plus agent fails to send event data to the server, leading to local data accumulation on the agent machine.

Prerequisites  

• Ensure the ADAudit Plus agent is installed and running on the target machine.

• Verify that the ADAudit Plus server is accessible over the network from the agent machine.

• You need the ADAudit Plus server hostname and ports used for agent communication.

Possible causes  

• No communication has occurred between the ADAudit Plus agent and server for the last N hours.

• The agent cannot reach the ADAudit Plus server due to network or firewall issues.

• Incorrect configuration of Network Address Translation (NAT) if used in the environment.

Resolution

Step 1: Verify ADAudit Plus agent communication  

1. Log in to the ADAudit Plus web console.

2. Navigate to Configuration > Configured Server > Agent Management > Manage.

3. In the list of deployed agents, locate the monitored machine where we have the error.

4. Click the Manage hyperlink next to the corresponding agent name.

5. Locate the Agent Communication Details section.

6. Use the Test Communication buttons under Action to validate both:

• RPC Communication 

• HTTP Communication 

7. These tests will provide insight into whether the agent can successfully communicate with the ADAudit Plus server over the required protocols.

Step 2: Validate network port connectivity  

A. For RPC communication issues:  

Ensure the following ports are open from the ADAudit Plus server to the monitored machine:

• TCP 445 

• TCP 135 

• TCP Dynamic Ports 49152–65535 

You can use PowerShell to test connectivity from the ADAudit Plus server:

Open the Start Menu and type PowerShell in the search bar > Windows PowerShell, and choose Run as administrator. Run the below command:

Test-NetConnection -ComputerName <TargetMachineName> -Port 135

B. For HTTP communication issues:  

Ensure the following ports are open from the monitored machine to the ADAudit Plus server:

• TCP 8555: Default agent communication port

• TCP 8444: Alternate HTTPS communication port (product port)

Note: These ports can be verified and customized in Admin > General Settings > Connection > General under Agent Server Communication Ports.

Step 3: Confirm NAT configuration

If the monitored machines and the ADAudit Plus server reside on different networks or are separated by a NAT device or firewall:

1. Navigate to Admin > General Settings > Connection > NAT.

2. Ensure the public FQDN and port mappings of the NAT device are correctly configured.

Related topics and articles  

• ADAudit Plus Agent Installation Guide

When and how to reach support