Score:0

Windows Server 2019 Event Forwarding returns 0 Source Computers

si flag

So I've configured my Windows Server 2019 as an event logger to get the events of shutdown,and logoff from my domain computers. I've included the DOMAIN\Domain Computers group and configured the Event Forwarding Subscription Group Policy through http as explained here with my SQDN as listed in the system properties. I've also allowed the 5985 port through my firewall just in case, and after all this configurations I still get 0 source computer. If you need see any concret configuration I will edit my question. Any ideas?

Swisstone avatar
cn flag
Can you provide the output of the following command on the collector: `wecutil gs <YourSubscriptionName>`
Sebastian Ciocarlan avatar
si flag
@Swisstone sorry, I finally found my issue and corrected it myself, and forgot to write a response.
Michael Hampton avatar
cz flag
Remember to mark the problem as solved by clicking the outline of the tick mark so that it turns solid green.
Score:0
si flag

I finally found out what my mistake was. I had to start winrm service on every source computer, as well as configuring the Event Forwarding Suscription Group Policy. To do this I followed this Microsoft official guide. (the Configuring the event source computer section)

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.