KBI 311513 New Feature: Windows Event Log Rule Option To Break Rule When Being Unable To Connect The Target Machine

Version

Argent for Compliance 3.1A-1610-C and later versions

Date

Wednesday, 21 December 2016

Summary

New option in Windows Event Log Rule is implemented so that Rule is broken when Argent AT engine could not read the event logs from target machine. It is useful in that situations that network connection is not reliable. By using the option, customer can be alerted immediately about failed event log monitoring and archiving because of network issue. In previous versions, customer might not realize no event logs are archived until he tries to run reports and only see blank ones.

The new feature has been implemented in Argent AT 5.1A-1610-C.

Technical Background

N/A

Resolution

Upgrade to Argent AT 5.1A-1610-C.