Event Log Forwarding causes gateway service crash RRS feed

  • Question

  • HI I have a functioning ATA-installation, with a single remote gateway monitoring 3 production domain controllers. I configured the gateway server as an event collector and now have the gateway server pulling 4776 events to the Forwarded Events log on the gateway server. Now when I try to enable the gateway to monitor forwarded events, the gateway crashes pretty much right away ("the service stopped unexpectedly") Am I missing something?
    Friday, September 18, 2015 2:00 AM

All replies

  • Hello pmins,

    Did you find solution for your problem? If not - can you share the gateway error logs ?


    Microsoft ATA Team

    Wednesday, October 7, 2015 1:21 PM
  • well, it seems the service crashes whenever you modify the config. However it restarts and runs fine afterwards.

    I thought it was just because of the log collection but that was false assumption.

    Saturday, October 10, 2015 11:59 PM
  • Hi pmins,

    Thanks for the update.

    The service may restart itself when changing certain configuration. This is by design (in order to refresh the configuration) but not mean it "crash".

    Microsoft ATA team.

    Sunday, October 11, 2015 3:09 PM