Agent Administration 


EventLog Analyzer comes In EventLog Analyzer, an agent might be required in one of the following two scenarios:

Installing the EventLog Analyzer agent

The following are the different ways in which you can deploy the EventLog Analyzer agent in devices:

Using EventLog Analyzer console:

To install the EventLog Analyzer agent using the product console,

Using GPOs:

Before beginning to install the EventLog Analyzer agent using GPOs, place the following files in a network-shared folder of the server:

To install the agent via GPOs:

Step 1: Creating a GPO

Create a new GPO as follows (based on the Windows Server version):

  1. Open Group Policy Management.
  2. In the left pane, right-click the Group Policy Objects container and select New.
  3. Give the GPO a suitable name and click OK.

Step 2: Configuring script settings

  1. Right-click the newly created GPO and click Edit.
  2. For Windows Server 2003, in the right pane of the GPO editor, double click Computer Configuration and navigate to Windows Settings → Scripts (Startup/Shutdown) → Startup.
  3. For Windows Server 2008 and later, navigate to Computer Configuration → Policies → Windows Settings → Scripts (Startup/Shutdown) → Startup.
  4. Right-click Startup and in the dialog box that appears, click Add.
  5. In the Add Script dialog box, click Browse and select InstallEventLogAgent.vbs from the shared location.
  6. In the Script Parameters field, enter the following parameters:
    /MSIPATH:"< share path of msi file>" /SERVERNAME:" <ELA server name>" /SERVERDBTYPE:"< database of server>"
    /SERVERIPADDRESS:" <IP address of server>" /SERVERPORT: "<port occupied by server>"
    /SERVERPROTOCOL:" <protocol (http/https)>" /SERVERVERSION:"<ELA  version>"
    /SERVERINSTDIR:"<ELA installed directory>"
  7. Click OK to return to the Startup Properties dialog box.
  8. Click Apply and then OK.

Step 3: Configuring Administrative Template Settings

  1. In the left pane of the Group Policy Management Editor, navigate to Computer Configuration → Administrator Templates → System.
  2. Under System, select Scripts.
  3. In the right pane of the GPO Editor, double-click Run logon scripts synchronously and enable it.
  4. Click Apply and then OK.
  5. Similarly, enable Maximum wait time for Group Policy scripts.
  6. Then, navigate to Logon under System
  7. In the right pane, double-click Always wait for the network at startup and logon and enable it.
  8. Click Apply and then OK.
  9. Then, navigate to Group Policy under System.
  10. In the right pane, double-click Group Policy slow link detection and enable it.
  11. Click Apply and then OK.

Step 4: Applying the GPO

Tip: For installing the agent on multiple computers at one go, create an AD group and add all the computers on which the agent needs to be installed to the group. Then, apply the GPO to that group.

  1. On the left pane of the Group Policy Management Editor, right-click the GPO you are working on and select Properties.
  2. Navigate to the Security tab and unselect the Apply Group Policy permissions for Authenticated Users
  3. Click Add and in the dialog box that appears, click Object Types
  4. If you want to apply the GPO to computers directly, ensure Computers is selected and then click OK. For applying it to a group, ensure Groups is selected and then click OK.
  5. Enter the name of the desired computer(s) and/or group(s) and click Check Names.
  6. Select the desired computer(s) and/or group(s) and click OK to return to the properties dialog box.

  7. In the Security tab, apply the following permissions to the selected group(s) and/or computer(s): 
    1. (i) Read > Allow
    2. (ii) Apply Group Policy > Allow

  8. Click Apply and then OK.
  9. Restart the computers to complete applying the GPO and wait for the reset password / unlock account link to appear on the Windows logon screen.

Using Microsoft System Center Configuration Manager (SCCM) or some similar software deployment tool:

Manual installation:

For Windows devices:

 

For Linux devices,

Managing EventLog Analyzer agents

Using EventLog Analyzer's console, you can uninstall, upgrade, and force the agent to restart.

 

Uninstalling the EventLog Analyzer agent

To uninstall the EventLog Analyzer from device(s),

Forcing restart of the EventLog Analyzer agent

To force the EventLog Analyzer to restart,

Forcing restart of the EventLog Analyzer agent

To force the EventLog Analyzer to upgrade,

Get download link