Hello, I'm trying to collect Microsoft Exchange Message Tracking Logs via McAfee Collector.
As I know these logs are saved in C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking Directory and each log is one line, so there is no need in "event delimeter".
connection established, Collector identifies *.LOG files correctly but in its Debug.log output says:
McAfeeEventCollector: DEBUG 1 Start No data to process, sleeping for 300 seconds; Pausing plugin.
So Receiver cannot receive any logs.
Have you configured this without using the collector agent? I've followed the process outlined here:https://community.mcafee.com/thread/52745?tstart=30 but I keep receiving the following error when I try to test the connection:
I provided support with a tcpdump, and they are telling me the account is locked. This is not the case, as I verified the account's status, and I receive the same error when I use my personal credentials for the logon. The account I am trying to use has FULL access to the share. Any suggestions??
i tryed it for you.
Do you setup the share for the user with write and read access?
And this setup
It works without a failure
The Path to the share is: "C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs" the Folder "Log" is my share and in the folder "MessageTracking" are the Log-Data.