Solved

Security Event Log Forwarding on Windows 2008 servers

Posted on 2013-11-14
1
731 Views
Last Modified: 2013-12-02
I've followed best practice guide to configure Windows 2008 event log forwarding.

On the target windows server 2008, used the winrm
quickconfig to setup the windows remote management service, plus firewall exception rule. I then added the collector computer account to targets local administrators group.

Used wecutl qc to config the collector. Created subscription on the collector, but when running a test subscription to the target configured as above, I get the following error:

0x80338113 the WinRM client sent a request to an HTTP server and got a response saying the requested HTTP URL was not available.

Not sure what to test next?
0
Comment
Question by:sessionhost4hty
1 Comment
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 500 total points
ID: 39649533
Make sure that this is completely configured properly. Below is a link providing all of the valid steps to ensure that Forwarding is setup properly...

There are also troubleshooting steps and the following link which will assist you when this is completed.

Settings up WinRM - http://blogs.technet.com/b/jonjor/archive/2009/01/09/winrm-windows-remote-management-troubleshooting.aspx

Will.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now