How to update the EventLog Analyzer server details in the agent registry key
Objective
This document explains the steps to update the EventLog Analyzer server details in the agent registry key. This is required when the EventLog Analyzer server IP address, hostname, or port is changed, ensuring uninterrupted communication between the agent and the server.
Prerequisite
Administrator access to the machine where the EventLog Analyzer agent is installed.
Knowledge of the new EventLog Analyzer server details (IP address/hostname and port).
Backup of the registry before making any changes.
Steps to follow
Log in to the machine where the EventLog Analyzer agent is installed.
Press Win + R, type regedit, and press Enter to open the Registry Editor.
Navigate to the following registry path:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ZOHO Corp\EventlogAnalyzer\ServerInfo

Locate the following keys:
ServerName → Update with the new EventLog Analyzer server IP/hostname.
Port → Update with the new EventLog Analyzer server port (default: 8400, unless changed).
Double-click the key you want to update, enter the new value, and click OK.
Close the Registry Editor.
Restart the EventLog Analyzer Agent service for the changes to take effect.
Tips
Always back up the registry before making modifications.
If the agent fails to communicate after the update, verify network connectivity and firewall rules between the agent and the server.
If the EventLog Analyzer IP address is changed, ensure syslog forwarding is also updated to forward logs to the new EventLog Analyzer server IP address.
Related articles and topics
New to ADSelfService Plus?