Event source settings
The following table contains settings that must be configured on your event sources. Event sources are computers that you want to monitor by GFI EventsManager:
| Log Type | Description |
|---|---|
| Windows® event log processing | Enable remote registry. |
| Text log processing |
The source folders must be accessible via Windows® shares. |
| Syslog and SNMP TrapsNotifications/alerts generated and transmitted by active network components (Example: hubs, routers and bridges) to SNMP server(s) whenever important events such as faults or security violations occur. Data contained in SNMP Traps may contain configuration, status as well as statistical information such as number of device failures to date. processing |
Configure sources/senders to send messages to the computer/IP where GFI EventsManager is installed. |
| Scanning machines with Windows® Vista or later |
Install GFI EventsManager on a computer running Windows® Vista or later. |
| System auditing |
Enable auditing on event sources. For information, refer to Enabling event source permissions manually and Enabling event source permissions automatically. |
Computer identification considerations
GFI EventsManager identifies computers via computer name or IP. If NETBIOS-compatible computer names are used, ensure that your DNS service is properly configured for name resolution. Unreliable name resolution downgrades overall system performance. If you disable NETBIOS over TCP/IP, you can still use GFI EventsManager, however you must specify computer name by IP.