Log Forwarder 2008 R2 does not forward events

selspiero99

Afternoon,

 

I am currently migrating from a Windows 2003 domain to a Windows 2008 R2. As part of this work, i am trying to move my log fowarders off the 2008 DCs to the new 2008 Servers.

 

The installation of version 1.1.7 works fine, but there are a couple of issues:

1) When i select the security log, i dont get the option tick boxes for fail auth and success auth

2) When i set up a new forward (copying the config from the 2003 server) it doesnt forward the event. I have an event in the soloarwinds.net event log:

Unable to setup Windows Event Log subscribers.  Subscribe failed with error 15001, The specified query is invalid.

3) If i try to do an example test, error in DNS log, this again doesnt forward.

 

Really need to get this sorted, as our service desk rely on notifications for account lock outs. 

 

Thanks for your help

selspiero99

I have resolved this, just incase anyone else has the problem, i changed the account used by the solarwinds log forwarder to a domain account with administative permissions, it now works