Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2517
  • Last Modified:

event forwarding from Server 2008R2 to Win7Client

Hi,

I am trying to get all the servers in Domain to foward certain events onto my Desktop so I can keep track of them better and not need to keep remote desktoping on to Servers. I have created the subscription and it says it is active and working ok. But when I look into the Forwarded events folder in event viewer I am getting the following event:

The description for Event ID 111 from source Microsoft-Windows-EventForwarder cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:


0
Contigo1
Asked:
Contigo1
  • 2
  • 2
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
You should be able to get the same affect by creating an MMC on your Windows 7 desktop that views the server's Event log.

Run MMC -> File -> Add/Remove Snap-in -> Event Viewer -> Add -> Select "Another Computer" and input the name of the server -> OK -> OK

That will let you connect to the Event Viewer remotely rather than having the events forwarded to you. This is a little more efficient, since the Events don't get sent to your system and consume bandwidth/processing power.
0
 
Contigo1Author Commented:
That has solved the problem but the reason why I was using a subscription was so that I could make it only show me errors\Warnings from the past 7 days if I filter it in the mmc I have to do it everytime I use the mmc. Is there a way of solving the error that I got?

0
 
Adam BrownSr Solutions ArchitectCommented:
I can't really find anything on that event ID. There may be a WinRM configuration issue on one side or the other. http://msdn.microsoft.com/en-us/library/bb870973%28v=vs.85%29.aspx might have more information.

However, if you use the MMC, you can create custom views that will meet your needs just as well as a subscription. In the Event Viewer MMC, go to custom views and create a new one. Select the options you want, name it, then save the MMC Console. From then on you'll have the custom view available any time you open the saved console.
0
 
Contigo1Author Commented:
The event ID does not seem to matter I have check the forwarded events today and it looks like it's picking up the event ID but not the actual error as It is doing it with every thing in the list. This means it has got to be a config issue.
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now