Skip to main content

Corrupt ErrorEvent in Event Reports

Symptoms​

  • The events report in Netwrix Change Tracker contains one or more ErrorEvent events. Their description states Corrupt.
  • Agent logs located in C:\ProgramData\NNT\gen7agent.service\rolling-log.txt contain the following line:
[timestamp] ERROR AgentTaskRunner - task execution failed for task %#% - %task_name% [timestamp]

Cause​

The agent directory on affected devices contains multiple conflicting Config-*.xml files. These files cause conflicts in device agent events.

Resolution​

NOTE: You can establish the affected agents via the events report—review the DeviceName and AgentID column values.

Perform an agent reset to reconfigure affected agents. Refer to the following steps:

  1. Stop the Netwrix Change Tracker Agent Service. Refer to the following Linux command:
# service nntgen7agent stop
  1. Navigate to the agent directory containing the Rolling-Log files. Refer to the following default path:
C:\ProgramData\NNT\gen7agent.service\

  1. Right-click the Hubdetails.xml file and select Edit.

  2. Replace the <E1> tag pair with the <Password> tag pair. Replace the contents with the current agent account password, as defined on your Netwrix Change Tracker Hub Server. Save the changes.

  3. Start the Agent Service. Refer to the following Linux command:

# service nntgen7agent start