The Windows Event Collector (WEC) errors when it is attempting to access a remote computer
WEC uses the following process to read remote event logs.
Common scenarios with the error message.
Unable to connect to the remote computer due to network issue:
This error is usually caused by an networking/connectivity problem between the Collector machine and machine and the log host (target) machine. To resolve this problem, resolve the underlying network issue and the collector should start working normally.
Unable to connect to the remote computer due to incorrect credentials:
ERROR_CODE. WNetAddConnection2 failed with error: A specified logon session does not exist. It may already have been terminated.
These errors are usually resolved by entering correct credentials into the sensor configuration.
Note: You may need to set the Monitored Host Account Name to
Note: If you continue to receive this error but you are confident the credentials are correct please contact support.
If the Remote Registry service is not running or is not accessible:
The registry is corrupt or damaged:
If the user has permissions to connect remotely, but does not have permissions to other services
User does not have permission's to the registry:
Application Reader can not access registry on target box. Make sure user [Username] has permission's to access registry on [Computer Name].
User does not have permission's to resources (can be caused by trust relationship on domain, or the user is not a member of the domain):
Application Reader failed to login into target box. Make sure sensor configuration has correct credentials and user [Username] has permission's to access [Computer Name].