000025594 - Envision: Very Few Windows Events Showing Up In Envision

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000025594
Applies ToenVision
Bulkadding WIndows devices
ComputerList.exe utility was used to create importlist.txt, and input into envision.
IssueEnvision: Very Few Windows Events Showing Up In Envision
Support, I am only getting a little bit of information in my event viewer from my Windows machines. For example, my laptop shows up as an enVision monitored device. However, when I look at the Message View and select my laptop and retrieve data for the current month, I only get back three events (One from Application, System and Security) dated October 23rd at 11
Causeimportlist.txt may contain non-windows servers, and if they are input into envision, winprocess.exe would drop without any error message(check via task manager), thus data collection from windows servers in same domain would stop. 
ResolutionWhen using ComputerList.exe, need to double check the output file importlist.txt, make sure it doesn't contain non-windows servers.
Legacy Article IDa37686

Attachments

    Outcomes