Logs to Collect for Netwrix Auditor SMS Alert Issues
Qusetion
Netwrix Auditor does not send SMS alerts, while email alerts work fine. What logs should be collected and provided to the Netwrix support team to troubleshoot the issue?
Answer
Follow the steps below to collect the necessary logs:
- On the Auditor Server, locate the Audit Core folder (by default,
C:\Program Files (x86)\Netwrix Auditor\Audit Core). - In the Audit Core folder, locate the
GlobalSettings.inifile. - Copy this file to the desktop and rename the copy to
AlertsSender.ini. - Open the
AlertsSender.inifile with any text editor, for example, Notepad++, and find theMaxSeverityline. - Change the value on this line from
INFOtoDBG. - Save the
AlertsSender.inifile, and then copy it back into the AuditCore folder. TheAlertsSender.inifile is required for the AlertsSender process to generate logs. - Open the Services snap-in and restart the Netwrix Auditor Core Service and the Netwrix Auditor Archive Service.
- Make a test change to trigger the affected alert, then go to the associated monitoring plan and click Update. This should help trigger the alert. Also, you can wait for the product to process the data (approximately 24 hours).
- Once you have allowed enough time through either test changes or natural events, locate the NwArchiveSvc folder (default location is
C:\ ProgramData\Netwrix Auditor\Logs\AuditCore). - Copy the NwArchiveSvc folder to another location, compress it, and attach it to the corresponding ticket in the Netwrix Customer Portal: https://www.netwrix.com/sign_in.html.
- When done, remove the
AlertsSender.inifile from the AuditCore folder. - Restart the Netwrix Auditor Core Service and the Netwrix Auditor Archive Service again to stop verbose logging once testing is complete.