How to update the EventLog Analyzer server details in the agent registry key
Objective
This document explains the steps to update the EventLog Analyzer server details in the agent registry key. This is required when the EventLog Analyzer server IP address, hostname, or port is changed, ensuring uninterrupted communication between the agent and the server.
Prerequisite
Administrator access to the machine where the EventLog Analyzer agent is installed.
Knowledge of the new EventLog Analyzer server details (IP address/hostname and port).
Backup of the registry before making any changes.
Steps to follow
Log in to the machine where the EventLog Analyzer agent is installed.
Press Win + R, type regedit, and press Enter to open the Registry Editor.
Navigate to the following registry path:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ZOHO Corp\EventlogAnalyzer\ServerInfo

Locate the following keys:
ServerName → Update with the new EventLog Analyzer server IP/hostname.
Port → Update with the new EventLog Analyzer server port (default: 8400, unless changed).
Double-click the key you want to update, enter the new value, and click OK.
Close the Registry Editor.
Restart the EventLog Analyzer Agent service for the changes to take effect.
Tips
Always back up the registry before making modifications.
If the agent fails to communicate after the update, verify network connectivity and firewall rules between the agent and the server.
If the EventLog Analyzer IP address is changed, ensure syslog forwarding is also updated to forward logs to the new EventLog Analyzer server IP address.
Related articles and topics
New to ADSelfService Plus?
Related Articles
Windows agent not communicating with EventLog Analyzer server
Issue description When the agent fails to communicate with the EventLog Analyzer server, the log transfer between devices is disrupted. As a result, logs accumulate on the agent machine until connectivity is restored. This delay in log transmission ...
How to migrate EventLog Analyzer standalone edition to different server or drive [Windows to Windows]
Objective This article provides a detailed step-by-step guide to migrate EventLog Analyzer Standalone instance (not integrated with Log360) to a new server or different server or drive. Prerequisites Refer to the System Requirement to plan the new ...
How to uninstall EventLog Analyzer Windows agent via UI
Objective This article provides detailed information on how to uninstall a Windows agent from the user interface of EventLog Analyzer. Prerequisites Ensure the required network ports are open: Port 135 Port 139 Port 445 Dynamic RPC port range ...
Unable to start EventLog Analyzer
Issue description This issue occurs when the EventLog Analyzer service fails to start, or when users are unable to access the web client through the browser (typically on ports 8400 or 8445). Users may experience one or more of the following ...
How to upgrade the EventLog Analyzer Agent?
Usually, an agent upgrade would happen automatically if the credentials provided for agents under the "Manage agents" section are valid or has the appropriate rights for accessing services or logs in the agent machine. However, in recent builds ...