I took over an existing Sentinel implementation. It has a MS Exchange
Server Collector connected to a Windows Event (WMI) Connector connected
to several Exchange server event sources.

I'm seeing "Failed to read from the Windows Event collection Service" on
the connector and "Not connected to the Windows Event Collection
Service" on the event sources.

The Windows Event Collection service is not running on the servers.

Is it just that the WEC services need to be started on each server? Or
do I need a central WECS server to collect from all of them and then
Sentinel collect from it?

Reading the sparse Microsoft documentation on WECS plus the
documentation with the Exchange Collector has me confused.


tscislaw's Profile: https://forums.netiq.com/member.php?userid=8043
View this thread: https://forums.netiq.com/showthread.php?t=52631