Quantcast
Channel: THWACK: Popular Discussions - Kiwi Syslog
Viewing all 15803 articles
Browse latest View live
↧

Kiwi syslog 9.4 on windows server 2012 64bit Service crash - Possible bug!

October 2, 2013, 4:10 am
$
0
0

Hello , kiwi friends!

 

I am trying to get Kiwi syslog 9.4 to work on windows server 2012 64bit but having problems with the service crashing then i try to start the kiwi syslog server console.

I have applied the kb fix for Microsoft .Net Framework 2 , before that i couldnt install kiwi syslog successfully becuse the service could not start.

http://knowledgebase.solarwinds.com/kb/questions/4386/

 

 

I have the following errors in the windows event viewer!

Error 7000: The Kiwi Syslog Server service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion

Error 7009 : A timeout was reached (30000 milliseconds) while waiting for the Kiwi Syslog Server service to connect.

 

Do you have a solution for this or could it be a new bug in windows server 2012 and the old dot net framework combined ?

 

Thanks in advance.

↧
Search

Bind Kiwi Syslog Web Access to a specific IP address

July 13, 2015, 10:43 am
$
0
0

You can use the UltiDev Web App Explorer to bind Kiwi Syslog Web Access to a specific IP address.

 

1. You will need to open the UltiDev Web App Explorer:

Capture1.PNG

2. Click the Network Address tab:

Capture2.PNG

3. Highlight the Host or IP address and click Edit:

Capture3.PNG

4. Select Specify host name or IP address optioin, and enter the IP address to bind to, then click OK:

Capture4.PNG

5. Finally you will want to Save the changes, and the stop and start the Monitoring Service:

Capture5.PNG

↧
↧

Unable to login to KiwiSyslog Webaccess

December 7, 2010, 12:32 am
$
0
0

Hi all !

past weekend we were unable to login to to Kiwi Syslog webaccess as a result of the follow error message:

" Session initialization error
An error occurred while initializing this session.
The session has been abandoned.

Event database initialization failure.
The database file may be corrupted. Run the repair utility to check the database file. [ Database name = C:\Programme\SolarWinds\Kiwi Syslog Web Access\html\App_Data\Event.sdf ] "

I have taken a look at the errorlog of Kiwi and noticed that there are three messages regarding this error:

2010-11-15 11:51:35 SolarWinds.KiwiSyslog.WebAccess.Data error: General exception. System.Runtime.InteropServices.SEHException: External component has thrown an exception. at System.Data.SqlServerCe.NativeMethods.ExecuteQueryPlan(IntPtr pTx, IntPtr pQpServices, IntPtr pQpCommand, IntPtr pQpPlan, IntPtr prgBinding, Int32 cDbBinding, IntPtr pData, Int32& recordsAffected, ResultSetOptions& cursorCapabilities, IntPtr& pSeCursor, Int32& fIsBaseTableCursor, IntPtr pError) at System.Data.SqlServerCe.SqlCeCommand.ExecuteCommandText(IntPtr& pCursor, Boolean& isBaseTableCursor) at System.Data.SqlServerCe.SqlCeCommand.ExecuteCommand(CommandBehavior behavior, String method, ResultSetOptions options) at System.Data.SqlServerCe.SqlCeCommand.ExecuteNonQuery() at SolarWinds.KiwiSyslog.WebAccess.Data.Logger.KiwiSyslogEventUpdate(Object state)

2010-12-04 20:58:48 SolarWinds.KiwiSyslog.WebAccess.Data error: Unable to start component, SQL exception. System.Data.SqlServerCe.SqlCeError: The database file may be corrupted. Run the repair utility to check the database file. [ Database name = C:\Programme\SolarWinds\Kiwi Syslog Web Access\html\App_Data\Event.sdf ]

2010-12-04 21:22:04 SolarWinds.KiwiSyslog.WebAccess.Data error: Unable to start component, SQL exception. System.Data.SqlServerCe.SqlCeError: The database file may be corrupted. Run the repair utility to check the database file. [ Database name = C:\Programme\SolarWinds\Kiwi Syslog Web Access\html\App_Data\Event.sdf ]

I start/stopped the webserver service without any success on saturday.
This morning i tried to access the page again and I got correctly redirected to http://10.x.x.x:8088/gateway.aspx.
At the moment the login is possible but I'm concerned that my database file may be corrupted!

Do you have any suggestions for me?

Thanks in advance!

Dan

↧

wrong message from logforwarder

December 16, 2011, 1:39 am
$
0
0

The logforwarder v1.1 is installed on a german 2008R2 Server.

In the eventlog on the server i see aps.net warnings and errors with the following message:

/*

Ereigniscode: 3005
Ereignismeldung: Es ist eine unbehandelte Ausnahme aufgetreten.
Ereigniszeit: 16.12.2011 08:10:49
Ereigniszeit (UTC): 16.12.2011 07:10:49
Ereignis-ID: 00e80467722a4ddaa60928cab11be830
Ereignissequenz: 2
Vorkommen: 1
Ereignisdetailcode: 0
 
Anwendungsinformationen:
    Anwendungsdomäne: /LM/W3SVC/19/ROOT-****************
    Vertrauensebene: Full
    Virtueller Anwendungspfad: /
    Anwendungspfad: ******
    Computername: ******
 
Prozessinformationen:
    Prozess-ID: 9796
    Prozessname: w3wp.exe
    Kontoname: IIS APPPOOL\AppsService
 
Ausnahmeinformationen:
    Ausnahmetyp: NullReferenceException
    Ausnahmemeldung: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei System.Web.HttpApplication.set_AsyncResult(HttpAsyncResult value)
   bei System.Web.HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext context, AsyncCallback cb, Object extraData)
   bei System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)

 
 
Anforderungsinformationen:
    Anforderungs-URL: http://127.0.0.1/*******
    Anforderungspfad: /********
    Benutzerhostadresse: 127.0.0.1
    Benutzer: 
    Ist authentifiziert: False
    Authentifizierungstyp: 
    Threadkontoname: IIS APPPOOL\AppsService
 
Threadinformationen:
    Thread-ID: 1
    Threadkontoname: IIS APPPOOL\AppsService
    Identitätswechsel für: False
    Stapelüberwachung:    bei System.Web.HttpApplication.set_AsyncResult(HttpAsyncResult value)
   bei System.Web.HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext context, AsyncCallback cb, Object extraData)
   bei System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
 
 
Details des benutzerdefinierten Ereignisses:

*/

But on the syslog server i see the following error message:

/*

12-16-2011    08:12:10    System4.Warning    192.168.6.**    Dez 16 08:10:49 ****** MSWinEventLog   4   Application   20   Fr Dez 16 08:10:49 2011   1309   ASP.NET 4.0.30319.0      N/A   Warning   *****   3   The description for Event ID 1309 from source ASP.NET 4.0.30319.0 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.If the event originated on another computer, the display information had to be saved with the event.The following information was included with the event: 3005. FormatMessage failed with error 1815, Die angegebene Sprachenkennung f³r die Ressourcen wurde nicht in der Image-Datei gefunden.

*/

I know that this is a problem with the language, but how can i solve this.

↧

Syslog messages format

July 10, 2015, 8:06 am
$
0
0

Why, when I send to Kiwi Syslog Server a message like "<25>Jul 10 18.04.33 Hostname Appname Message", it only understand the priority, but the timestamp and hostname has ignored and the log look like "2015-07-10 18:04:33 127.0.0.1 Daemon.Alert Jul 10 18.04.33 Hostname Appname Message"

↧
↧

Syslog Web Access Database Error : Unable to perform maintenance procedure

February 16, 2011, 5:43 am
$
0
0

Kiwi Syslog Web Access failed the database maintenance.

- Eventlog.txt:

=======================

STATUS: SolarWinds.KiwiSyslog.WebAccess.Data: SQLCE database maintenance started @2011/02/16 14:36:30
SolarWinds.KiwiSyslog.WebAccess.Data error: Unable to perform maintenance procedure.  System.Data.SqlServerCe.SqlCeError: The database file is larger than the configured maximum database size. This setting takes effect on the first concurrent database connection only. [ Required Max Database Size (in MB; 0 if unknown) = 3992 ]
STATUS: SolarWinds.KiwiSyslog.WebAccess.Data: SQLCE database maintenance failed.
=======================

Then, I would like to delete the old events by SQL Server Management Studio.

But I can not connect to the Event.sdf database because I don't know the password.

What is the password to connect to the Event.sdf?

* I read "How to delete old records from Kiwi Syslog Web Access??" post.

↧

Procurve switches not sending syslog messages in KIWI syslog

July 25, 2013, 6:58 am
$
0
0

Hi all,

 

New here, searched for discussions but found no entry on procurve switch(es).

The Procurve switches will not send any syslog messages (wiresharked the server)

Turned on logging on the switch: logging 'ip-address'

 

show debug

 

Debug Logging

  Source IP Selection: Outgoing Interface
  Destination:
   Logging --
     'ip-address' Kiwi Syslog server

       Protocol = UDP
       Port     = 514
     Facility = user
     Severity = info
     System Module = all-pass
     Priority Desc =

 

tried facility 'syslog' still nothing.

 

Only the Procurve switches will not send any syslog messages.

Other devices such as Cisco ASA's work fine.

 

Anyone ideas to solve this?

 

TIA Jaap

↧

sys log server errors "FormatMessage failed with 1815" help please!!

April 8, 2015, 2:19 pm
$
0
0

Good day Community,

 

I am experiencing an urgent issue. The sys log server forwarder is forwarding the following message to the KIWI sys log server. The actual security logs are showing the correct information, however the message below is being showed. I thought it was the server, but wen I added another sever to forward security logs, I am getting the same message as shown below.

 

Can anyone who have encountered this message or know how to resolve this issue. The security logs are on the server and I can view them using event viewer properly and audit logs are reflecting fine.

 

I would really appreciate your humble assistance or comments.

 

 

 

Apr 08 14:36:34 CASSIOPEIA1.carimed.local MSWinEventLog 5 Security 495 Wed Apr 08 14:36:33 2015

4624 Microsoft-Windows-Security-Auditing N/A Audit Success CASSIOPEIA1.carimed.local 12544

The description for Event ID 4624 from source Microsoft-Windows-Security-Auditing cannot be

found. Either the component that raises this event is not installed on your local computer or

the installation is corrupted. You can install or repair the component on the local computer.If

the event originated on another computer, the display information had to be saved with the

event.The following information was included with the event: S-1-0-0. FormatMessage failed with

error 1815, The specified resource language ID cannot be found in the image file.

↧
Search

Log forwarder fail to start on windows server 2012

July 7, 2015, 1:27 pm
$
0
0

Hi

 

today i installed the log forwarder on a windows server 2012 machine but i am facing the following error:

 

after the installation, it seems that the log forwarder agent doesn't want to start (also the console seems to be unresponsive)

and if i try to start manually the log forwarder agent service, i receive a message box that informs me that :''the solarwinds event forwarder for windows service, started and than stopped. some services stops automatically if they are not used by any program or service''

 

did you ever faced something like this?

how do i have to procede?

 

thanks a lot

↧
↧

syslog server backup and restore

February 25, 2013, 7:33 am
$
0
0

Hi,

 

I am in the process of moving kiwi syslog server v9 from one system to other system. want to check if there is a simple process to migrate all settings instead of reconfiguring.

 

Thanks,

Sridhar

↧

Kiwi Syslog Server service has stopped with Error when I send a SNMP Trap(v1) to KSS v9.5 RC2.

August 6, 2015, 11:02 pm
$
0
0

Hello,

 

When KSS v9.5 RC2 received a SNMP Trap(v1), Kiwi Syslog Server service has stopped with Error.

 

Kiwi Syslog Server Version: v9.5 RC2(v9.5.0.323)

OS: Windows Server 2008 R2 SP1

 

Errorlog.txt:

2015-08-06 15:29:18 *** INTERNAL PROGRAM ERROR - Please contact http://www.kiwisyslog.com/support/ ***

2015-08-06 15:29:18 Service Version 9.5.0.323 | Error Number: 6 | Description: Overflow | Module Name: Syslogd.frm | Procedure Name: SNMPMgr_Trap | Line Number: 770 | Date and time: 2015/08/06 15:29:18

 

I can re-start it by Manage>Start the Syslogd service.

When KSS received the SNMP Trap again, Kiwi Syslog Server service has stopped with Error.

 

Please fix this problem.

 

Best Regards,

↧

Why is my kiwi syslog cache folder growing every min?

June 9, 2014, 7:03 pm
$
0
0

Hi all,

 

I am currently using kiwi syslog 9.1 in win2008 which i have been using for a few months.

Since yesterday i can see that for every minute a file name "192.168.x.x-515-connectionxxxx.bin" is generated under C:\program files (x86)\syslogd \cache

Each file has a size of 1MB.

I tried deleting the cache folder but after sometime this file generation thing comes back again.

Pls advise how this can be solved? Thks in advance.

↧

Event Log Forwarder - Where is the Audit Failure Type?

March 18, 2015, 5:40 pm
$
0
0

Hi There,

 

I'm trialing Kiwi Syslog and I'm having trouble with the Log Forwarder and Security Event Log.  When I click on the Security Log I don't see Audit Success or Audit Failure as an event type.  It just has Error, Warning and Information.  If I manually edit the CFG file and add <int>16</int> it works, but then it gets overwritten if I make a change.  Am I doing something wrong?  How can I see Audit Failure as an Event Type?

 

Thanks,

↧
↧

RECOMMEND Kiwi Syslog ON SPREAD THE WORD FOR A $25 AMAZON GIFT CARD!

December 6, 2013, 1:44 pm
$
0
0

Let the community know how impressed you are with Kiwi Syslog and earn a $25 Amazon gift card!  Simply post your review in Spread The Word with the questions answered below:

 

  1.       What was life like before using SolarWinds? (Include what you were using and why you decided it was time for a change)
  2.        Which SolarWinds product(s) saved your bacon?
  3.        Did you consider other options, and why did you choose SolarWinds?
  4.       How has life been since you've rolled out SolarWinds in your environment?
↧

Choosing all logs automatically

August 7, 2015, 8:02 am
$
0
0

Is it possible to configure a config file to do all event logs.  By that I mean without implicitly ticking the all box and it then selecting all the logs.

 

I'd like to be able to roll out a config saying "all logs" rather than create a file on one server and it miss logs on another server because the config file just has a list of logs from the original server.

 

It might be possible but I can't see how to do it.

 

Thanks.

↧
Search

uable to receive logs from configured firewalls

August 7, 2015, 6:57 am
$
0
0

hello everyone,

 

i have setup kiwi syslog in windows server. The test message seems to be working fine but, I'm unable to receive logs from the configured firewalls. 

 

below is my log error messages 

 

An error occured while checking for  available software updates. [10060] connection timed out [25061]

 

please see the attachment for further details

 

Kind Regards,

Rahul

 

↧

Help with match &count display in counters script

August 9, 2015, 4:44 am
$
0
0

Hi

 

I very new to scripts and kiwisyslog

 

I like to use the kiwisyslog  CustomStats field to get some snmp trap related information.

 

CustomStats01: community

CustomStats02: enterprise

CustomStats03: enterprise_mib_name

CustomStats04: agent_ip

CustomStats05: version

 

 

What I need to do  the exsample VB script to get stat about those SNMP fields?

↧
↧

SYSLOG error with windows server 2012

June 9, 2015, 12:24 am
$
0
0

Hi

 

i am installing syslog in my server room to monitor the log in/log out operations on serers... i installed log forwarder on some windows server 2003 servers and everithig is ok but now i installed it on some windows server 2012 and all the messages that i receive from these servers are like this :''06-08-2015 17:03:47 Kernel.Info 172.19.12.119 giu 08 17.03.47 srv-av.astergenova.it MSWinEventLog   6   Application   127   lun giu 08 17.03.41 2015   1003   Microsoft-Windows-Security-SPP      N/A   Information   srv-av.astergenova.it   0   The description for Event ID 1003 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.If the event originated on another computer, the display information had to be saved with the event.The following information was included with the event: 55c92734-d682-4d71-983e-d6ec3f16059f. FormatMessage failed with error 15100, The resource loader failed to find MUI file."

do you have idea of how to fix this? syslogger is installed on a xp machine but i also tried to install it on a windows 2012 server machine and nothing changed

↧

Kiwi syslog 9.4 on windows server 2012 64bit Service crash - Possible bug!

October 2, 2013, 4:10 am
$
0
0

Hello , kiwi friends!

 

I am trying to get Kiwi syslog 9.4 to work on windows server 2012 64bit but having problems with the service crashing then i try to start the kiwi syslog server console.

I have applied the kb fix for Microsoft .Net Framework 2 , before that i couldnt install kiwi syslog successfully becuse the service could not start.

http://knowledgebase.solarwinds.com/kb/questions/4386/

 

 

I have the following errors in the windows event viewer!

Error 7000: The Kiwi Syslog Server service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion

Error 7009 : A timeout was reached (30000 milliseconds) while waiting for the Kiwi Syslog Server service to connect.

 

Do you have a solution for this or could it be a new bug in windows server 2012 and the old dot net framework combined ?

 

Thanks in advance.

↧

Changing the userid for Syslog Web Access

October 13, 2009, 2:06 pm
$
0
0

During installation of Syslog Web Access, you are prompted for a userid and password.  The password can be changed at any time easily.

But how does one change the userid?  Where is it stored?

We even went as far as trying to reinstall syslog web access to get to the initial userid prompt again.  But having already asked us once, it did not ask us again.

Thanks,

 

-Ken

↧
Viewing all 15803 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>