SCOM Audit Collection Error

karthik palani 1,016 Reputation points
2022-07-06T13:15:11.243+00:00

Hi All,

Need some advice on below please

We have SCOM 2016 server with audit database collection enabled on all Domain controllers. There are built in audit reports which works fine. But there are some custom built audit report for generating security events like lockout, user ID etc... All of a sudden it stopped generating the data and it is blank. I am getting the below error, could you advice on how to fix this

218126-scom1.png

Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,394 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. SChalakov 10,256 Reputation points MVP
    2022-07-06T14:39:21.07+00:00

    Hi,

    does your SDK Accont haave the "Generate Security Audits" right on the machine (check the Path propertys of the aalert)?

    if not, you need to grant it to the SDK Account and check if the error is gone.

    ----------

    (If the reply was helpful please don't forget to upvote or accept as answer, thank you)
    Regards,
    Stoyan

    0 comments No comments