Return
-
Title
Windows Event log monitoring cannot be performed on OS major version 5, which is older than Windows Vista/Windows Server 2008 -
Description
After setting up the Windows Event Log agent to monitor Windows 2003, there are no data collected and the following is found in the logs:
An error was detected while scanning remote file(s): Windows Event log monitoring cannot be performed on OS major version 5, which is older than Windows Vista/Windows Server 2008
-
Cause
The Application Program Interface (API) used by the Windows Event Log agent is only compatible with Windows Vista/2008 Server and above. It will not work for lower versions such as Windows 2003.
Log monitor was created because starting with Windows Vista/Windows Server 2008 new event logs were added to Windows, which WMI could not access. See here for more information.
-
Resolution
The alternative is to use the WindowsAgent's embedded capability. The WindowsAgent has event log monitoring capabilities that can be used for Windows 2003. This existed before the log monitor functionality was added. The WindowsAgent uses WMI to obtain records from the Windows event log. See e-doc here for more information.