Adding Active Directory resources (AD)

In all Windows devices, ensure that WMI, DCOM are enabled, and logging is enabled for the respective modules/objects.

Adding a Domain

In the Select Domain drop down menu, click on the Add New Domain link. This will open the Add Domain window.

1. Enter the domain name.

2. Click on the discover link to discover the domain controllers. Alternatively, you may also key in the domain controllers in the Domain Controllers field, separated by commas.

3. Enter credentials (Login Name and Password) with admin privileges. Note that the machine login credentials are used when no authentication credentials are provided.

4. Click on the Add button.

Adding Windows devices from a domain

1. Select the domain from the drop down menu. The Windows devices in the selected domain will be automatically discovered and listed.

2. Select the device(s) by clicking on the respective checkbox(es). You can easily search for a device using the search box or by filtering based on the OU using OU Filter.

3. Click on the Add button to add the device(s) for monitoring.

Adding Windows devices from a workgroup

You can add a device from a workgroup by clicking on the Add workgroup device link. This will list out the devices from your workgroups.

1. Choose the workgroup from the Select Workgroup drop down menu.

2. Select the device(s) by clicking on the respective checkbox(es).

3. Click on the Add button to add the device(s) for monitoring.

Adding Windows devices manually

Optionally, you can also manually add the device as shown below by clicking on the Configure Manually link.

1. Enter the Device name or IP address. You can add the device as a Syslog device by clicking the Add as Syslog device checkbox.

2. Enter the Username and Password with administrator credentials, and click on the Verify login link.

3. Click on the Add button to add the device for monitoring.

Caution: If EventLog Analyzer has been installed on a UNIX machine, it cannot collect event logs from Windows devices. However, third party applications can be used to convert the Windows event logs to Syslogs and forward them to EventLog Analyzer.