000017406 - Errors when collecting logs from Windows 2003 using Windows Legacy Collector in RSA Security Analytics.

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000017406
Applies ToRSA Security Analytics
RSA Security Analytics Windows Legacy Collector
RSA enVision
IssueErrors when collecting logs from Windows 2003 using Windows Legacy Collector in RSA Security Analytics.
Error message:  Could not connect to server '\\<ServerIP>\ROOT\CIMV2': error code: 80070005: Access is denied.
CauseThe user permissions do not allow WMI connections in the Security Analytics Windows Legacy Collector.
Resolution

In order to resolve the issue, you can perform a WMI call by connecting to the Windows Legacy Collector 2008 system, opening the command prompt, and issuing the following commands:


  1. wmic
  2. /node:<windowsMachineIP> /user:<username> os get caption

If you are unsure of the steps above or continue to experience issues, contact RSA Support and quote this article ID for further assistance.

Legacy Article IDa65409

Attachments

    Outcomes