cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

SIEM WMI connect error

Hi All

I am having a problem with a certain WMI data source. I am able to telnet successfully to this source from the Event Receiver on port 135, but when I do a test connection, I get the error message "WMI Event Log test unsuccessful. Error: The SSH connection failed. (ER360).

I have never seen this specific error before and it does not seem to point to a credentials issue. Has anyone encountered this before or can you point me in the right direction to troubleshoot?

Many thanks

Jacques

3 Replies

Re: SIEM WMI connect error

Hi Jacques,

Are you having any other errors in relation to the receiver that data source is configured on?  The actual command to be run will be launched from the ESM when you test the connection to the receiver to be executed.  That would be the most likely source of this SSH error.  If in doubt, please do give us a call so we can have a look at it.  Cheers.

Michael

Re: SIEM WMI connect error

Hi Michael

No, we do not seem to have any other strange issues with data sources on that specific receiver. We do have other WMI data sources on there, but they give a different error when I try to test connectivity indicating more of a routing / firewall issue in my opinion.

This data source in question is the only one with an ssh related error. I will probably log a call then to troubleshoot further

Jacques

Re: SIEM WMI connect error

can you take a screeshot of the data source configuration for the WMI client.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community