Server 2016 logs are not being forwarded to Server 2012 R2 log collector

[Rishi Pandit]

Hi have event log collector configured in 2012 R2 and <g class="gr_ gr_13 gr-alert gr_tiny gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" data-gr-id="13" id="13">i</g> have forwarded security logs from all my DCs (2012 R2) to this log collector (Source initiated). Everything worked fine for many years. I upgraded all my DCs to 2016 and everything was working fine even though but some of my DCs faced <g class="gr_ gr_207 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="207" id="207">hdd</g> failure and <g class="gr_ gr_249 gr-alert gr_tiny gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" data-gr-id="249" id="249">i</g> had to rebuild them from scratch i.e. installed 2016 and promoted to DC. Now <g class="gr_ gr_468 gr-alert gr_tiny gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" data-gr-id="468" id="468">i</g> am facing issue in such domain controllers which are built from scratch. Logs of these servers are not being forwarded to my Event Log Collector. I have verified all the settings, values, <g class="gr_ gr_738 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="738" id="738">gpo</g> for the identical value to the DCs which are working but no gain. Any suggestions?

Do <g class="gr_ gr_882 gr-alert gr_tiny gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" data-gr-id="882" id="882">i</g> need to upgrade my log collector to 2016? but DCs which <g class="gr_ gr_970 gr-alert gr_tiny gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" data-gr-id="970" id="970">i</g> upgraded are still sending logs...
Thanks, Rishi Pandit.

Continue reading...