1_jstockton

RSP and Windows Events

Discussion created by 1_jstockton on Feb 14, 2012
Latest reply on Feb 15, 2012 by jhelmbrecht

Im trying to configure the RSP probe to monitor for events on Windows Server 2003 and the log shows the following:

 

Failed to execute command -g ntevents -c 100

 

The summary report window for the events doesn't show any information, but the processes report does.

 

Any ideas why?

 

Also, when trying to monitor Unix is using root the only option?  This won't fly with our security team.

Outcomes