I followed KB69428 to set up a weekly report showing successful and failed on demand scans. Nearly all of the servers are sending events 1203/1035 to the ePO correctly. Some servers, despite the local logs showing the scan completed, do not send event 1203 (nor 1035) to the Threat Event Log in the ePO. I've double checked the evtflter.ini, they aren't listed there. Not sure if it is related, but there is also a server that sent event 1203 and 1035 from the same scan. All of thsee servers are still communicating with the ePO regularly. Any help is appreciated.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.