Anonymous_User Absent Member.
Absent Member.
426 views

Windows WECS WMI RPC error


Hello!

In Sentinel 7.1 some EventSources have the following error message: "The
RPC server is unavailable. (Exception from HRESULT: 0x800706BA)" .
I tried everything that it is in the WMI connector documentation, but I
still got error.
Could anybody solve this kind of problem? What could be the problem?

Thank you for your answers!


--
woodspeed
------------------------------------------------------------------------
woodspeed's Profile: https://forums.netiq.com/member.php?userid=7232
View this thread: https://forums.netiq.com/showthread.php?t=51775

0 Likes
3 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Windows WECS WMI RPC error

If you login to the windows machine running the WECS service, are you able
to use microsoft's Event Viewer from there, as the user running the WECS
service, to access the remote machine's Security event log?

Any firewall, or RPC or WMI service differences on this (broken) box vs.
another (working) box?

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Windows WECS WMI RPC error


Sorry for the late answer, I had to talk to with the administrators.

The firewall is turned off, but the service is running.
The RPC and WMI services are running.
From The WECS, we can't open the remote host eventlog.

From Server0.0.log
Date CEST 2014|SEVERE|WMS Response
Manager|esecurity.ccs.comp.evtsrcmgt.connector.WMS.WMIConnector.submit
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

The only difference was that most of the host have a syslog-ng agent
running with error that it couldn't connect to the remote server.


--
woodspeed
------------------------------------------------------------------------
woodspeed's Profile: https://forums.netiq.com/member.php?userid=7232
View this thread: https://forums.netiq.com/showthread.php?t=51775

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Windows WECS WMI RPC error

On 09/22/2014 02:35 AM, woodspeed wrote:
>
> The firewall is turned off, but the service is running.
> The RPC and WMI services are running.
> From The WECS, we can't open the remote host eventlog.


This is the problem then. If you cannot open the remote host's log from
the WECS box as the user you specified WECS should use, then your domain
is misconfigured permissions-wise and you should fix that. The error
message returned is directly from microsoft, so only the fix can come from
their products (most-likely).

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.