Hi
In a windows server, with mcafee siem collector installed, I want to access to shared folder in other Windows Server to process in SIEM logs files stored in, but when I'm going to create a new data source in Mcafee SIEM Collector, and press Validate I've an error:
Failed to retrieve windows version from host
My user has privilege in shared folder, and I access from mcafee siem collector server to another server, but I think that Collector makes another check that show me this error
Thanks
Could be the user the SIEM collector is running as. Did you check to see what account the service is configured to run as?
Service is running with Local service account.
I have 12 servers with the same configuration, and only two of them are bad
Yeah, if it's running as a Local service account, it won't have permissions to a remote share. You will need to use an account that has permissions to access that share.
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA