{"id":7254,"date":"2021-06-18T14:15:27","date_gmt":"2021-06-18T19:15:27","guid":{"rendered":"https:\/\/www.poweradmin.com\/blog\/?p=7254"},"modified":"2021-10-05T11:54:28","modified_gmt":"2021-10-05T16:54:28","slug":"event-log-monitors-failing-check-windows-firewall","status":"publish","type":"post","link":"https:\/\/www.poweradmin.com\/blog\/event-log-monitors-failing-check-windows-firewall\/","title":{"rendered":"Event Log Monitors Failing?  Check Windows Firewall"},"content":{"rendered":"<p>In the past week or two we have been receiving a lot of email from customers reporting that their <a href=\"https:\/\/www.poweradmin.com\/help\/latestsmhelp.aspx?page=monitor_event_log.aspx&amp;ref=blog\">Event Log Monitor<\/a> has suddenly started failing on a number of servers.\u00a0 We don\u2019t have proof, but we\u2019re guessing a recent Windows Update must have disabled the Remote Event Log Management rules.<\/p>\n<p>\u00a0<\/p>\n<p>(Edit):\u00a0 Confirmed!\u00a0\u00a0 Thanks Paul!\u00a0\u00a0\u00a0 Please see <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/release-health\/resolved-issues-windows-8.1-and-windows-server-2012-r2#1623msgdesc\">https:\/\/docs.microsoft.com\/en-us\/windows\/release-health\/resolved-issues-windows-8.1-and-windows-server-2012-r2#1623msgdesc<\/a><\/p>\n<p>\u00a0<\/p>\n<p><a href=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/uploads\/2021\/06\/event-log-firewall-rules.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7255\" src=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/uploads\/2021\/06\/event-log-firewall-rules.png\" alt=\"event log firewall rules\" width=\"442\" height=\"148\" srcset=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/uploads\/2021\/06\/event-log-firewall-rules.png 442w, https:\/\/www.poweradmin.com\/blog\/wp-content\/uploads\/2021\/06\/event-log-firewall-rules-300x100.png 300w\" sizes=\"auto, (max-width: 442px) 100vw, 442px\"><\/a><\/p>\n<p>\u00a0<\/p>\n<p>We\u2019ve been telling customers to re-enable those rules, and so far it has fixed the issue for everyone.<\/p>\n<p>\u00a0<\/p>\n<p>EDIT: ANOTHER update that messes with Event Log monitoring.\u00a0\u00a0 Please see:<\/p>\n<p>\u00a0<\/p>\n<p><a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/june-8-2021-kb5003638-os-build-14393-4467-d9dfce91-b425-483a-8280-f54d7005b231\" rel=\"nofollow\" target=\"_blank\">https:\/\/support.microsoft.com\/en-us\/topic\/june-8-2021-kb5003638-os-build-14393-4467-d9dfce91-b425-483a-8280-f54d7005b231<img class=\"extlink-icon\" src=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/plugins\/external-links-nofollow-open-in-new-tab-favicon\/images\/extlink.png\"><\/a><\/p>\n<p>\u00a0<\/p>\n<p>Especially note where it says \u201c<em><span style=\"color: #000000;\">This issue is resolved if the local and remote devices both have installed updates released June 8, 2021 or later.<\/span><\/em>\u201c<\/p>\n<p>\u00a0<\/p>\n<p>Also see the June 2021 heading on:<\/p>\n<p>\u00a0<\/p>\n<p><a title=\"https:\/\/docs.microsoft.com\/en-us\/windows\/release-health\/resolved-issues-windows-10-1607#1623msgdesc\" href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/release-health\/resolved-issues-windows-10-1607#1623msgdesc\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">https:\/\/docs.microsoft.com\/en-us\/windows\/release-health\/resolved-issues-windows-10-1607#1623msgdesc<\/a><\/p>\n<p>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the past week or two we have been receiving a lot of email from customers reporting that their Event Log Monitor has suddenly started failing on a number of servers.\u00a0 We don\u2019t have proof, but we\u2019re guessing a recent Windows Update must have disabled the Remote Event Log Management rules. \u00a0 (Edit):\u00a0 Confirmed!\u00a0\u00a0 Thanks [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":7255,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[57,10,9,8],"tags":[],"class_list":["post-7254","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-monitoring","category-power-admin","category-technical","category-windows"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/7254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/comments?post=7254"}],"version-history":[{"count":3,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/7254\/revisions"}],"predecessor-version":[{"id":7262,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/7254\/revisions\/7262"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/media\/7255"}],"wp:attachment":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/media?parent=7254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/categories?post=7254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/tags?post=7254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}