Event logs forwarding
If I setup the collector and the forwarder fine and then I go on the collector pc to create a subscription. There under Subscription type and source computers I have to choose either Collector initiated or Source computer initiated (which is faint out probably because I have to configure it from the client pcs am I right ?). Also if I click Advanced I can choose an event delivery optimization option. I know that these have different batch timeouts, but what does batch timeout really mean here? and since the Minimize bandwith and Minimize latency use push delivery modes and in the previous option I have selected the subscription type to Collector initiated which is a pull mode does it creates a problem or it does not matter ? Thank you
May 9th, 2009 3:19am
Also now I am not able to get any events from the client pc and in the event viewer system on the Collector pc this warning is showing... The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener eventid 10149 here is the output of winrm enumerate winrm/config/listener Listener Address = * Transport = HTTP Port = 80 Hostname Enabled = true URLPrefix = wsman CertificateThumbprint ListeningOn = 127.0.0.1, 192.168.0.50, 192.168.1.200, ::1, fe80::5efe:192.16 8.0.50%13, fe80::5efe:192.168.1.200%12, fe80::941d:f94f:dc77:76a1%11, fe80::949a :efd:be01:c1a5%10 Any help pls ?
Free Windows Admin Tool Kit Click here and download it now
May 9th, 2009 5:02am
Hi,
I suggest referring to the following articles:
Creating a Collector Initiated Subscription
http://msdn.microsoft.com/en-us/library/bb513652(VS.85).aspx
Creating a Source Initiated Subscription
http://msdn.microsoft.com/en-us/library/bb870971(VS.85).aspx
Configure Advanced Subscription Settings
http://technet.microsoft.com/en-us/library/cc749167(WS.10).aspx
Configure Computers to Forward and Collect Events
http://technet.microsoft.com/en-us/library/cc748890(WS.10).aspx
To resolve the The WinRM service is not listening for WS-Management requests, please refer to the following article:
Event ID 10149 Listener Availability
http://technet.microsoft.com/en-us/library/dd363600.aspx
Hope it helps.
Tim Quan - MSFT
May 11th, 2009 10:43am