event forwarding from Server 2008R2 to Win7Client

Posted on 2011-09-02
Last Modified: 2012-05-12

I am trying to get all the servers in Domain to foward certain events onto my Desktop so I can keep track of them better and not need to keep remote desktoping on to Servers. I have created the subscription and it says it is active and working ok. But when I look into the Forwarded events folder in event viewer I am getting the following event:

The description for Event ID 111 from source Microsoft-Windows-EventForwarder cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Question by:Contigo1
  • 2
  • 2
LVL 39

Expert Comment

by:Adam Brown
ID: 36474880
You should be able to get the same affect by creating an MMC on your Windows 7 desktop that views the server's Event log.

Run MMC -> File -> Add/Remove Snap-in -> Event Viewer -> Add -> Select "Another Computer" and input the name of the server -> OK -> OK

That will let you connect to the Event Viewer remotely rather than having the events forwarded to you. This is a little more efficient, since the Events don't get sent to your system and consume bandwidth/processing power.

Author Comment

ID: 36483133
That has solved the problem but the reason why I was using a subscription was so that I could make it only show me errors\Warnings from the past 7 days if I filter it in the mmc I have to do it everytime I use the mmc. Is there a way of solving the error that I got?

LVL 39

Accepted Solution

Adam Brown earned 500 total points
ID: 36483164
I can't really find anything on that event ID. There may be a WinRM configuration issue on one side or the other. might have more information.

However, if you use the MMC, you can create custom views that will meet your needs just as well as a subscription. In the Event Viewer MMC, go to custom views and create a new one. Select the options you want, name it, then save the MMC Console. From then on you'll have the custom view available any time you open the saved console.

Author Comment

ID: 36483186
The event ID does not seem to matter I have check the forwarded events today and it looks like it's picking up the event ID but not the actual error as It is doing it with every thing in the list. This means it has got to be a config issue.

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question