📄️ Access Is Denied Error in Event Log Manager Health
Explains why the 'Access is denied' error appears in the Netwrix Auditor Event Log Manager health log and how to resolve it by ensuring the data collection account has correct permissions and password.
📄️ Could Not Locate End of Event Log Error
Explains the Event ID 6141 health log error indicating the end of the event log could not be located and provides causes and step-by-step resolutions for File Servers monitoring plans.
📄️ Error: Failed to check for event log existence
Describes the "Failed to check for event log existence" error, how to test for loopback-related connectivity issues, and how to resolve the problem by disabling Network Traffic Compression or applying Microsoft KB 926642.
📄️ Event Log Manager Report "Service Starts and Stops
If your servers use a non-English language, the Event Log Manager report "Service Starts and Stops" may show no data because the RDL template looks for English service-state terms. This article explains how to add localized terms to the report template and redeploy it to SSRS.
📄️ Following Event Log Settings May Lead to Incorrect or Incomplete Data in Reports
Explains the cause and resolution for Windows event log audit error Event ID 1016 when event log retention is set to "Do not overwrite events (clear log manually)".
📄️ How to Edit Schedules in Netwrix Auditor Event Log
This article explains how to edit data collection and reporting schedules in Netwrix Auditor Event Log Manager. It shows how to edit the Task Scheduler task for collection and how to change the reporting notification time in the monitoring plan.
📄️ How to Exclude System Account From Event Log
Explains how to exclude the Windows `SYSTEM` account from Event Logs by applying a filter or changing the audit policy.
📄️ How to force Netwrix Auditor to collect a specific
Describes how to force Netwrix Auditor to collect a specific Applications and Services event log by obtaining the log's full name in Event Viewer and entering it into the Event Log filter.
📄️ How to reduce the NetWrix Event Log Manager databa
Learn how to reduce the NetWrix Event Log Manager SQL database size by configuring the database retention period to remove old events automatically.
📄️ How to remove Netwrix Event Log agent from multipl
Shows how to remove the Netwrix Event Log agent from multiple servers by using sc.exe and a provided PowerShell script that accepts a list of servers.
📄️ How to Save and Zip Netwrix Auditor System Health
Learn how to export the Netwrix Auditor System Health event log using an elevated Command Prompt or manually via Event Viewer, and how to zip the saved log for support.
📄️ Migrate Event Log Manager Monitoring Plans
Shows how to migrate a monitoring plan for Event Log Manager (ELM) between Netwrix Auditor servers by copying rule folders and exporting/importing Task Scheduler tasks.
📄️ Monitoring SSL Certificates with Event Log Manager
Learn how to monitor SSL certificate events by creating filters and alerts in Event Log Manager for Netwrix Auditor.
📄️ Netwrix Auditor Event Log Manager shows SMTP authe
Describes how to resolve SMTP authentication errors in Netwrix Auditor Event Log Manager when configuring a monitoring plan, typically caused by missing TLS 1.2 support. Includes registry changes and WinHTTP settings to enable TLS 1.2 on the Auditor and target servers.
📄️ Netwrix Auditor Failed to Process Event Logs on a
Describes how to resolve Event ID 2001 COM Error -2147023485 when Netwrix Auditor cannot process Event Logs on a Domain Controller by adjusting agent settings and enabling network traffic compression.
📄️ Parallel Redo Events in SQL Server Event Log
Explains why SQL Server event log entries 17137 and 49930 (parallel redo start/shutdown) appear when AUTO_CLOSE is enabled and how to resolve them by disabling AUTO_CLOSE, including interactions with Netwrix Auditor.
📄️ Process event log backup without domain administra
If your service account is not a member of the Domain Administrators group, follow these steps to allow Netwrix Auditor to process event log backups by assigning group membership, registry and file permissions, or by deploying a Group Policy to Domain Controllers.
📄️ Reset collection history for Generic Events (Event
Describes how to reset the Generic Event (Event Log Management) collection history in Netwrix Auditor so the system re-collects event logs that were previously collected.
📄️ The Event Logs reports for Windows Server does not
If you configured a Windows Servers monitoring plan in Netwrix Auditor but the Windows Server → Event Log reports show no data, configure a monitoring plan for Netwrix Auditor Event Log Manager and set Audit Archiving filters. This article explains the steps to configure Event Log Manager, test changes, and run reports.