Solutions for common problems with the File action:
•By default EventSentry will not be able to write to a file that is located on a remote server (shared drive) due to permission issues. The EventSentry service runs under the LocalSystem user account, an account that usually does not have any permissions on remote computers. Please refer to the troubleshooting FAQ for a solution to this problem.
•The directory for File Name will have to exist and will not be created by EventSentry. The file name itself will however be created if necessary.
•This action logs the following events to the application event log with the EventSentry event source in case of an error:
Event IDs |
Event ID |
Problem / Description |
510 |
The requested file could not be opened/created. |
|
|
|
Also, it is generally not recommend to use one file name for multiple installations of EventSentry due to possible timing problems. If more than one instance of EventSentry tries to write to the file at the same time, then some event records could be skipped or the file could become corrupted.