ntevl probes configured to monitor event logs that do not exist on the Windows server using the polling mode appears to leak memory over time.
To resolve this, the following changes were made to the ntevl configuration:
- Change the Run Type from "Poll" to "Event"
- Specify a locale specific encoding (like UTF-8 for English) as the Output Encoding value
- Specify a locale specific encoding (like UTF-8 for English) as the System Encoding value
<Please see attached file for image>