nagios LS is not receiving Microsoft event id 4625 anymore !
Posted: Wed Sep 16, 2020 10:04 am
Nagios LS is not receiving Microsoft netlogon event id 4625 anymore !
Hi there,
We didn't know when the Problem started and if Microsoft has changed something recently, but our nagios ls dashboard are suddently desperately empty.
Indeed, lots of fields are missing in the messages. Not only net logon event id 4625 is missing, 4624 eventid also, and the TargetUserName, TargetDomainName fields...
Only the windows hosts are concerned, other reports are still ok.
Nxlogs clients are still running and are connected. Nagios LS still receives messages from the hosts, but less than it uses to.
Did someone allready experienced this ?
Could this be linked with this : How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472
https://support.microsoft.com/en-us/hel ... ions-assoc
Thx for your help, Olivier
Hi there,
We didn't know when the Problem started and if Microsoft has changed something recently, but our nagios ls dashboard are suddently desperately empty.
Indeed, lots of fields are missing in the messages. Not only net logon event id 4625 is missing, 4624 eventid also, and the TargetUserName, TargetDomainName fields...
Only the windows hosts are concerned, other reports are still ok.
Nxlogs clients are still running and are connected. Nagios LS still receives messages from the hosts, but less than it uses to.
Did someone allready experienced this ?
Could this be linked with this : How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472
https://support.microsoft.com/en-us/hel ... ions-assoc
Thx for your help, Olivier