Hotfix Applied Events Not Showing Up 2012 and 2012R2 servers.
说明
We provide a report from CA detailing the "Hotfix Applied" event for servers to our SOX auditors to demonstrate evidence of monthly patching. For some reason there is NO activity on 5 specific servers in our environment for that hotfix event. There are lots of other events. And the servers are patching. Strangely there are HOTFIX ROLLED BACK events for those same 5 servers and we have never rolled back a hotfix. So there seems to be a problem we cannot explain.
原因
In 2012 and 2012R2 servers the Change Auditor agent is discarding these events rather than forwarding them.
解决办法
Product defect identified TF00486391 has been created.