10.2.2 Failure Audit (Event ID: 4625 or 4776) is recorded in the Windows security event log.
When the monitored host is running Windows, Failure Audit (Event ID: 4625 or 4776) might be recorded in the Windows security event log.
PFM - RM for Platform makes a WMI connection to the monitored host by using the user name and password specified in the account information#1 when the monitoring target was set up. However, WMI also tries to connect to the monitored host by using the process-executing account information#2 (in which a user name and password were specified when the instance environment was set up), resulting in this problem. Even when Failure Audit (Event ID: 4625 or 4776) is displayed in the Windows security event log, there is no problem if performance information has been collected.
To avoid this problem, take the following steps:
-
Create account information having the same user name and password on the PFM - RM host and the monitored host.
-
Specify the user name and password (in the account information created in step 1) in the setting items for the instance environment and the setting items for the monitoring target as described below.
-
RMHost_User#2 setting item in the account information for the instance environment: User name
-
RMHost_Password#2 setting item in the account information for the instance environment: Password
-
User#1 setting item in the account information for the monitoring target: User name
-
Password#1 setting item in the account information for the monitoring target: Password
For details about how to specify these settings, see 3.1.4 Setup procedure for the Windows edition.
-
#1: This is a setting item (User or Password) in common account information (wmi) when common account information is used.
#2: This is a setting item (User or Password) in common account information (pfmhost) when common account information is used.