When attempting to gather logs from a Domain Controller the Gathering job completes with warnings. Upon further review, there is a warning that ChangeAuditor for Active Directory: ChangeAuditor for AD Log - The specified log doesn't exist.
On a collection you will get a datasource failed when expanding the agent/server collection and it shows Change Auditor log source as the failure.
ChangeAuditor, which is separate software with it's own licensing, is not installed in the environment or ChangeAuditor Event Logging not been enabled.
Resolution 1: ChangeAuditor is not installed in the environment
Remove the ChangeAuditor for Active Directory: ChangeAuditor for AD Log datasource from the Gathering job:
Resolution 2: ChangeAuditor is not installed in the environment
Remove the ChangeAuditor for Active Directory: ChangeAuditor for AD Log datasource from the Collection:
Resolution 3: ChangeAuditor is installed but Event Logging is not been enabled
Follow the steps in the following article to enable Active Directory Event logging which will create the "ChangeAuditor for Active Directory: ChangeAuditor for AD Log":
https://support.quest.com/change-auditor/kb/84260/can-the-data-collected-by-change-auditor-be-written-to-the-windows-event-log-as-well-
© ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー Cookie Preference Center