When trying to view event details the window says text invalid or missing event guid

Article Id: 156869

Status: Published

Updated On: 17-08-2012 08:47

Legacy Id: TECH194556

Products:

Security Information Manager

Issue/Introduction:

When trying to view event details within the console incident manager the popup window is blank with the text invalid or missing event guid.

Event Details window completely blank - "Invalid or missing event guid"

The Web API returns the error ID:222128 - Error in retrieving Event ID: NOT ARCHIVED

Cause:

The incident manager is looking for events on the wrong SSIM.

Resolution:

Verify the correlation and forwarding configurations on the servers.