Quantcast
Channel: Support Portal
Viewing all 217 articles
Browse latest View live

Cannot connect to the console

$
0
0
Morning

I have setup ADAudit on my server and it is running and collecting.

The problem i have is that I have to logon to the server to use it.

If i try to go to the address, either http://ip address:8081 or http://fqdn:8081, i get the page cannot be displayed.

is there a setting i need to configure?

Thanks

Wayne

Re : Cannot connect to the console

$
0
0
Wayne,

Can you access this link from the machine where ADAudit Plus is installed? If so, I would guess there is some sort of firewall issue. If this is not the issue, please let us know.

Derek

Re : Cannot connect to the console

$
0
0
Hi Derek

I can access it on the server.

What should i be allowing in the firewall on the audit server?

Wayne

Re : Cannot connect to the console

$
0
0
Wayne,

ensure that the ADAP server can communicate outbound over 8081.
Also, ensure that the client can receive over 8081. 

If you have a firewall between them, that will require both in and out 8081. 

Derek

No data available error

$
0
0
We have 8 domain controllers and starting on Monday they won't connect to the DC's and pull any data. is there specific ports that ADAduit Plus relies on. Firewall is turned off on all DC's, we have made not changes to the DC's. We do run Avast on the servers but that has been on the servers for a while now. Any suggestion would be great.

Thanks,

Matt

Re : No data available error

$
0
0
Answering my question so i case anyone sees this post and wonders what it was. The AdAudit Plus tool relies on the "Advanced Audit policies" in your domain so if you turn those off that will affect the AD Audit Plus tool.

File Server Audit not excluding ~*

$
0
0

I recently installed the File Server Audit add-on....and even though the default exclusion include files with ~*, I'm still getting large numbers of files showing up in the change or deleted reports that start with ~*.


Any one have any suggestions to resolve this? It's cluttering up my reports with a bunch of noise.

Thanks

Re : No data available error

$
0
0
It is always recommended to have advanced audit policies enabled instead of legacy policies for more granularity in our results. However the hiatus can also happen due to reasons such as port conflict, communication block, insufficient privileges held etc. It would be easier to troubleshoot if we know the error message.

Re : File Server Audit not excluding ~*

$
0
0
Please share a screenshot of exclude configuration in your ADAudit Plus. 

Re : File Server Audit not excluding ~*

$
0
0

I had the same issue ans this is what support told me:

"Kindly add the exclusion like '*~*' to exclude this events. This is because previously the product searched for '~*' in the File name, now it checks for the whole path and not the name. Hence the exclusion ~* is not working. Once the exclusion is added in the mentioned format *~* the report will exclude these events here on."

Re : File Server Audit not excluding ~*

$
0
0
Thanks. I'd tried previously, but may not have let the configuration sit long enough (less than 24hrs before reverting). I'll reset to this config and let it sit a while longer this time.

Re : File Server Audit not excluding ~*

$
0
0
Yes, this only takes effect going forward i.e. it will only drop files that match the pattern on future collections. If other files that matched the pattern were already collected there is nothing that can be done other than to set a filter on a custom report. 

Re : File Server Audit not excluding ~*

$
0
0
Hope the situation has changed. If not, please send an email to support@adauditplus.com so we would work on a remote session.

Regards,
ADAudit Plus Team

PGSQL file sizes

$
0
0
We've had AD Audit running for some time now and it seems to be using a lot of disk space.
Was hoping someone could point me in the right direction?

  • Archiving is turned on (190 days) and every option is checked.
  • I can see a zip file named "AUDFileAuditInfo_1455258195464.zip" dated 02:00 this morning (17Mb) so this would appear to be working.
  • Folder C:\Program Files (x86)\ManageEngine\ADAudit Plus\pgsql\data\base\ is 40GB in size with files from today all the way back to Sept 2014
  • The majority of this space seems to be taken up by 57 files over 400Mb each, the oldest being from 20th February 2016 (184 days ago)
Any ideas why only 57 of these files from a total of 4,341 are so large? (400 to 600 Mb)

Re : PGSQL file sizes

$
0
0
Please follow below steps and please share the results with us.

1. Login to ADAudit Plus, Open a new tab in the browser and go to, http://localhost:8081/runQuery.do

Note: 'localhost' refers the machine where we installed ADAudit Plus, if you are accessing the console from remote computer and port may differ as per your configuration.

2. Execute the below query,

select table_name, count(*) from audmetatable group by table_name order by count(*) desc

3. Please let us know the output of the query

This would give us the maximum number of tables a particular category has stored in the database from where we could start troubleshooting.

Regards,
ADAudit Plus Team


Re : PGSQL file sizes

$
0
0
Thanks for this, results are below;

table_name                   count      
AUDFileAuditInfo             62
AUDComputerAuditInfo          19
AUDLogonInfo                     17
AUDUserMgmt_0             1
AUDComputerMgmt             1
AUDPolicyChange_0             1
AUDGPOMgmt_0             1
AUDFileAuditInfo_0             1
ADAPUserAuditInfo             1
AUDNPSAuditInfo_0             1
AUDGPOMgmt                     1
AUDLogonLogoffInfo_0     1
AUDAccountCreation             1
AudGPOAuditInfo             1
AUDDNSAuditInfo_0             1
AUDLogonLogoffInfo             1
AUDNPSAuditInfo             1
AUDLogonInfo_0             1
AUDFileIntegrityMonitor     1
AUDAccountCreation_0     1
AUDDNSAuditInfo             1
AUDFileIntegrityMonitor_0     1
AUDComputerAuditInfo_0     1
AUDComputerMgmt_0     1
AUDADOAuditInfo_0             1
AudPrintJobsInQueue             1
AUDOUMgmt_0                     1
AUDPolicyChange             1
AUDOUMgmt                     1
AUDGroupMgmt                     1
AUDAlert                             1
AUDGroupMgmt_0             1
AUDADOAuditInfo             1
AUDUserMgmt                     1




Re : PGSQL file sizes

$
0
0
You've configured archiving to happen for the data only when they are older than 190 days. By that, it means 6-months worth of data would have to stay inside the database. In our case, we've got maximum number of tables for the 'File audit' category events where most of them might be the events triggered for permission changes/SACL changes. It is fairly acceptable to have around 40 GB space occupied to store data with in the database for 6-months. 

Other than the event tables, other files in the mentioned location are database configuration files which wouldn't give you any troubles. 

Regards,
ADAudit Plus Team

Re : PGSQL file sizes

8007000eERROR_MESSAGE

$
0
0

Got this error:

[07:52:26:904]|[09-12-2016]|[ADSMLogger]|[INFO]|[125]: WMI ERROR -> key is ServerNameerror values = {ERROR_SEVERITY : SEVEREERROR_CODE : 8007000eERROR_MESSAGE : Not enough storage is available to complete this operation.
}, |


Server configuration:
Server is used only for ADAudit Plus

Win2012R2
RAM 8Gb
Free disk space 14 Gb

Any suggestions?

Re : 8007000eERROR_MESSAGE

$
0
0
The error code refers the action of server (ADAudit Plus installed) running our of indirect non-disk resources (File handles, etc). Please ensure you have enough memory (Recommended 8 GB), page file size on the machine where ADAudit Plus is installed.

Regards,
ADAudit Plus Team
Viewing all 217 articles
Browse latest View live