Not able to open ntevl security log: Failed to get events | Error contacting probe

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

When trying to open the ntevl security log we get the error: 

Failed to get events
Error contacting probe | | ntevl: communication error

Can't monitor events from security log. 

Alarms not coming for security events

It works for application and system logs, but it doesn't work for security log events. 

Environment

• DX UIM 23.4.* 
• Any ntevl version 
• Any Windows OS
• Domain Controller with heavy load

 

Cause

Documented known issue when monitoring security log on Domain Controllers: ntevl (NT Event Log Monitoring) Release Notes

 

Resolution

Broadcom suggests to exclude security logs monitoring on Microsoft Domain Controllers under a heavy load.