Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Server & Application Monitor (SAM) > Windows Event Log Monitor does not fully support RPC fetching

Windows Event Log Monitor does not fully support RPC fetching

Created by Rodim Suarez, last modified by MindTouch on Jun 23, 2016

Views: 57 Votes: 0 Revisions: 2

Overview

The Windows Event Log Monitor does not fully support RPC fetching.

Environment

All SAM versions

Cause 

  • Events are generated by an older Windows operating system.
  • Events are generated by 3rd party software on an older Windows operating system.

Resolution

If you are experiencing Limited Support errors, it is recommended that you change the fetching method to WMI. 

Compatible operating systems and protocols

 

Windows Vista

Windows Server 2008 R2

Windows 7

Windows Server 2012

Windows Server 2003
  Protocol Protocol
Target Node OS WMI RPC WMI RPC
Windows 2000 Fully Supported Limited Support Fully Supported Limited Support

Windows XP

Fully Supported Limited Support Fully Supported Limited Support
Windows Server 2003 Fully Supported Limited Support Fully Supported Limited Support
Windows Server 2008 Fully Supported Fully Supported Fully Supported Limited Support
Windows Vista Fully Supported Fully Supported Fully Supported Limited Support
Windows 7 Fully Supported Fully Supported Fully Supported Limited Support
Windows Server 2012 Fully Supported Fully Supported Fully Supported Limited Support

Limited Support is defined as the following,

The Windows Event Log Monitor may produce unexpected results, yielding a status of "Unknown" or "Unable to Decode," when:

  • Using the RPC fetching method on Windows XP/2000/2003 combined with "Include Events" or "Exclude Events" to specify search keywords in event messages.

 

 

Last modified
03:44, 23 Jun 2016

Tags

Classifications

Public