• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 12273
  • Last Modified:

Event ID 257 Alert Manager Event Interface

Does anyone know why this error may be occurring?

Alert Manager Event Interface: Alert Manager Event Interface unable to send alert to \\Server\pipe\AlertManager. Error returned = The system cannot find the file specified.

I found an article on this site and basically have a hard time believing the soltuion. It states to remove alert manager because it is included with VirusScan Enterprise. Not true! You are not able to post messages to the event log nor post messages to email if alert manager is not installed.

McAfee, well as usual not finding any answers there.
0
nightvisionsystems
Asked:
nightvisionsystems
  • 5
  • 2
1 Solution
 
Mark SkrodzkiSenior Systems EngineerCommented:
Hi nightvisionsystems,

Is the McAfee Alert Manager started on the target machine? This service needs to be running for the named pipe to exist.

Cheers!
0
 
nightvisionsystemsAuthor Commented:
It was not running, set to startup type automatic, should have been running. my thought is that the service is crashing based on another question that I submitted.

It is event ID 1000 - simply states the following

faulting applicatation amgrsrvc.exe, version 4.7.0.262, fault address 0x0000f9af

Is this exe the service

If so any suggestions
0
 
Mark SkrodzkiSenior Systems EngineerCommented:
nightvisionsystems,

At any point, has any McAfee software been uninstalled or reinstalled on the target machine? I have seen something similar iin the past and the only way I resolved it was to reinstall the program. If that doesn't work, you might have to uninstall your antivirus package and install as new. Make sure that if you choose to uninstall the software, you note any custom options/features that might exist so that when you reinstall, you are back to where you were before.

This might not be an easy solution, but if you cannot get any answers from McAfee this might be your only choice.

skrodzkim
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
nightvisionsystemsAuthor Commented:
I will do as you have adviced on on locations set of server and then see how the week goes. Obviously, yes the magnitude of work is a stinker. If it corrects the situation then the work is worth it. Thanks, I will let you knowhow things pan out.
0
 
nightvisionsystemsAuthor Commented:
I am adding additional information of errors I was receiving.

Does anyone know were to begin troubleshooting this? I have found nothing on the web yet.

Faulting application amgrsrvc.exe, version 4.7.0.262, faulting module amgrsrvc.exe, version 4.7.0.262, fault address 0x0000f9af.

From what I can tell it is McAfee Alert Manager.

0
 
nightvisionsystemsAuthor Commented:
Additional errors all related to same problem.
Does anyone know where to begin for troubleshooting this event ID?

All servers periodically report the following
Event ID 257
Alert Manager Event Log Alert:
Alert Manager Service: Active Dir Republish Not Successful.

I had checked the knowledge base for McAfee and found two solutions. Neither have helped.

NAI27786 'Maybe brain dead, but no idea what they are referring to in this'
and
NAI29793 'Entry does not exist in registry on all servers'

Any thoughts or assistance would be greatly apprecated.
0
 
nightvisionsystemsAuthor Commented:
As promised, over the weekend I uninstalled McAfee VirusScan from each server, not necessary but rebooted. Then uninstalled McAfee Alert Manger, not necessary but rebooted agian. At this point I installed the McAfee Virus Scan, then installed Patch 4, 7, 8, 9, and 10. At this point I rebooted the server. Installed the McAfee Alert Manager. Once this was complete I then configured McAfee Virus Scan for Weekly scans and Daily DAT updates. I placed any neccsary exclusions in On-Access and Access-Protection. Once this was complete I configured the Alert Manager for email notification and event logging. I removed any network messaging broacasts. I feel sorry for the next person who is searching for this. Yes it was drastic, but it did do the trick. Thanks all for your support
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 5
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now