Regresar
-
Título
" Change Auditor event message file locked" displayed when deploying a Change Auditor agent -
Descripción
The Deployment Result column displays, "The Windows EventLog service has a Change Auditor event message file locked, which could cause undesired service restarts. Close all Event Log viewers and try again or run the installer manually to override" when deploying a Change Auditor agent. -
Causa
The coordinator or agent installer detects that the Windows EventLog service has one or more Change Auditor event message file open and locked. -
Resolución
WORKAROUND:
Ensure the Event Viewer is closed and stop any other applications that may read events or monitor the Windows Event Viewer on the computer that the Change Auditor agent is being installed on. For example, Splunk or Snare.
or
Manually install the agent
TF0044694 was created for this issue
This issue has been fixed in current Change Auditor versions.