Security Event Log Forwarding on Windows 2008 servers
Posted on 2013-11-14
I've followed best practice guide to configure Windows 2008 event log forwarding.
On the target windows server 2008, used the winrm
quickconfig to setup the windows remote management service, plus firewall exception rule. I then added the collector computer account to targets local administrators group.
Used wecutl qc to config the collector. Created subscription on the collector, but when running a test subscription to the target configured as above, I get the following error:
0x80338113 the WinRM client sent a request to an HTTP server and got a response saying the requested HTTP URL was not available.
Not sure what to test next?