Forwarded Windows Active Directory Logs "Event ID 4624" Text Shows as "%%1842"

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Windows Event Log 4624 only shows "%%1842" in the log in Aria Operations for Logs.

Environment

• Aria Operations for Logs 8.14
• Aria Operations for Logs 8.16

Cause

The rendered text format of the forwarded events is causing the problem as it sends the whole event. Which leads to localization problems and problems with the standard template in the WEC.

Resolution

Changed event forwarding format from "Rendered text" to "Events".