Troubleshooting

Understand and resolve some common issues you might face while auditing your Nutanix Files using ADAudit Plus.

Yet to fetch event data or The timestamp is not updated or No data is received

Verify if the events from the Nutanix Files are forwarded to the ADAudit Plus server and ensure that the TCP 1468 port is open.

Troubleshooting steps

• Open the Command Prompt and execute the cmdutil.bat file from <ADAudit Plus Installation folder>\bin and login.
• Type in the following command:

  admin syslog-tcp-port-check

• Perform any file activity in the configured share and check the messages displayed in the Command Prompt window.
• There are two possible messages that will be displayed on the Command Prompt screen:
  1. Message reads "Started Listening to TCP Port" and subsequently there is:
     • No Incoming Data: If no incoming data is displayed, check whether the partner server and notification policy are configured correctly.
     • Incoming Data: If incoming data is displayed, contact support@adauditplus.com for further troubleshooting.
  2. Error Message reads "Address Already in Use"
     • If this error message is displayed, it means the port is not open. Please ensure that port 1468 is open.

Error in getting shares (or) Access is denied

Ensure that the user configured under Domain Settings has permission to read the target shares from the MMC snap-in.

Error - TCP Syslog Listening stopped

On the ADAudit Plus web console, navigate to Admin > General Settings > Connection > General and use the toggle to turn on Current TCP Syslog Status.