Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Log & Event Manager (LEM) > Windows agents are sending limited events

Windows agents are sending limited events

Created by Jason Dee, last modified by Rodim Suarez on Mar 09, 2017

Views: 209 Votes: 1 Revisions: 4

Updated March 9, 2017


Windows hosts are sending a limited number of events or a very small number of event types.


All LEM versions


Improperly configured Group Policy object or Windows Audit Policy.


The events and event types sent over by LEM agents are dictated by the events that are created by Windows. If you are receiving some events from an Agent, we can assume that the Agent and LEM are working properly. The issue is that the events themselves are not being generated due to an improperly configured Group Policy object or Windows Audit Policy.


Please refer to Audit Policies and Best Practices for LEM for additional information on our recommended audit policies and how to make those changes.


Last modified