KBI 311513 New Feature: Windows Event Log Rule Option To Break Rule When Being Unable To Connect The Target Machine
Version
Argent for Compliance 3.1A-1610-C and later versions
Date
Wednesday, 21 December 2016
Summary
New option in Windows Event Log Rule is implemented so that Rule is broken when Argent AT engine could not read the event logs from target machine. It is useful in that situations that network connection is not reliable. By using the option, customer can be alerted immediately about failed event log monitoring and archiving because of network issue. In previous versions, customer might not realize no event logs are archived until he tries to run reports and only see blank ones.
The new feature has been implemented in Argent AT 5.1A-1610-C.
Technical Background
N/A
Resolution
Upgrade to Argent AT 5.1A-1610-C.