SCOM Audit Collection Error

Question

Hi All,

Need some advice on below please

We have SCOM 2016 server with audit database collection enabled on all Domain controllers. There are built in audit reports which works fine. But there are some custom built audit report for generating security events like lockout, user ID etc... All of a sudden it stopped generating the data and it is blank. I am getting the below error, could you advice on how to fix this

Answer 1

Hi,

does your SDK Accont haave the "Generate Security Audits" right on the machine (check the Path propertys of the aalert)?

if not, you need to grant it to the SDK Account and check if the error is gone.

----------

(If the reply was helpful please don't forget to upvote or accept as answer, thank you)
Regards,
Stoyan