Tools

Invalid subscription when setting up Log Forwarder

This article describes the issue of receiving an invalid subscription error during the setup of Log Forwarder.

First published date

10/11/2018 10:39 PM

Last published date

10/11/2018 10:39 PM

Overview

The following error is receiving during the set up of a log forwarder subscription:

Invalid subscription error. 
The even subscription is either too complex, or invalid.

Product section

Kiwi Syslog Server

Cause

This error may be caused by one of the following reasons: 

  • Invalid or illegal Event-ID inclusions/exclusions
  • Invalid or illegal Users
  • Invalid or illegal Computers
  • Greater than 23 Event-ID exclusions

Resolution

Change the account used by the SolarWinds Log Forwarder to a domain account with administrative permissions.