locked
Error 2008 -1004 - perfmon/netmon/Splunk RRS feed

  • Question

  • We have 10 domain Controllers With the ATA LW GW installed. But they alsy have splunk stream agent going. As soon as ATA GW is installed, it triggers Event ID 1004 several times and eventually kills the Splunk stream With event ID 2008. From what i can see this is related to how ATA uses perfmon/netmon. Any ideas on how we can resolve this issue? If we remove the ATA Gateway it Works as intended With the Splunk stream.
    Friday, April 12, 2019 12:59 PM

All replies

  • First time I hear about it, but to troubleshoot we will need to collect logs etc to see which resource is colliding and why.

    Are you using the latest ATA version ? (1.9 Update 2)

    I would suggest first upgrading to the latest, and then if you still have the issue open a support case.

    You can ask the support engineer to add me personally to the email thread so I can jump in and help if needed.

    Eli

    Friday, April 12, 2019 7:27 PM