Ntevl (NT Event Log Monitoring) probe not working properly on one server

Document ID : KB000005855
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

Ntevl probe is not applying the following exclusion: "WEEMAIL (10018)" . 


Environment:
UIM Version: 8.0 Controller Version: 7.62 Hub Version: 7.61 Database Type: SQL, Oracle, etc. SQL ntvel version: 4.24 OS where the ntvel probe is installed: win 2012 R2
Resolution:

 1. Made a backup of the probe 

2. Instead of using the event ID for the exclusion, we used the message string 

3. Reinstalled the probe, by right clicking on the probe and selecting update. 

4. After the above was done, the following exclusion: "WEEMAIL (10018)” was being applied