稽核集合轉寄站 - Windows 服務

Microsoft.SystemCenter.AuditCollectionService.Forwarder.ServiceMonitor (UnitMonitor)

此監視會檢查 ACS 轉寄站 Windows 服務的狀態。

Knowledge Base article:

摘要

此稽核收集服務已進入停止狀態。當稽核收集服務未在執行時,無法將任何稽核資料轉寄到管理伺服器。

原因

代理程式側稽核收集未正確設定。

解決方式

請檢查系統事件記錄檔以判定稽核收集服務進入停止狀態的原因。

可使用下列連結嘗試重新啟動服務:

啟動稽核收集服務

Element properties:

TargetMicrosoft.SystemCenter.Agent
Parent MonitorMicrosoft.SystemCenter.AuditCollectionService.AvailabilityHealthRollup
CategoryStateCollection
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.CheckNTServiceStateMonitorType
RemotableTrue
AccessibilityInternal
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.SystemCenter.AuditCollectionService.Forwarder.ServiceMonitor" Accessibility="Internal" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.Agent" ParentMonitorID="Microsoft.SystemCenter.AuditCollectionService.AvailabilityHealthRollup" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.CheckNTServiceStateMonitorType" ConfirmDelivery="true">
<Category>StateCollection</Category>
<OperationalStates>
<OperationalState ID="Running" MonitorTypeStateID="Running" HealthState="Success"/>
<OperationalState ID="NotRunning" MonitorTypeStateID="NotRunning" HealthState="Error"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<ServiceName>AdtAgent</ServiceName>
</Configuration>
</UnitMonitor>