Forwarding Events

Hello,
I have implemented a JTree in with custom renderers. Each node is a complex widget. It has a label, a button and a table. Events are intercepted by the JTree, so if I click on the button nothing happens, and when I click on a table's cell I cannot edit the contents. So the cuestion is how I forward these events to the components.
Thak you
Joaquin Morcate

it's better to implement TreeCellEditor with the same component.
regards,
Stas

Similar Messages

Essential event viewer bugs with "Forwarded Events" log in Windows Server 2008 R2 and Windows 7

To my general experience, Windows event viewer is one of the most problematic, faulty management tools in the case of extensive use of its more sophisticated capabilities. The sole description as well as reproduction of some entangled failures would require
remarkable effort.
With the "Forwarded Events" log however, the situation becomes particularly worse in that even simple functionality fails and workarounds are difficult to find. That’s what I’ll describe here in order to share my experience with interested users.
For precision: I’ve extensively used event viewer on a German Windows Server 2008 R2 SP1 (Windows SBS 2011 Standard SP1). The bugs I found on that system, I could reproduce on a German Windows 7 Professional 64-Bit SP1, too.
Problem 1: Failure of even simple event filtering
To reproduce this problem, execute these steps on a test machine with any of the two OS mentioned above:
(i) To prepare log contents, do either of the following:
(a) populate some events to your local "Forwarded Events" log (most simply by subscribing events from other logs of the same machine; stop subscription if you have collected some events)
Or
(b) copy a non-empty log file "ForwardedEvents.evtx" from another machine (with any of the two OS mentioned above) to your test machine and open the file in event viewer.
(ii) Navigate to your "Forwarded Events" test log and open the filtering dialog. In the "Includes/Excludes Event IDs" field, type: 1-9000. Click OK.
(iii) Look at the results pane: Surprise, 0 Events! Do you really have no event IDs between 1 and 9000 in your test log?
(iv) Another example, if you have forwarded security events in your test log: Clear filter, if any previous filter is in place. Open the filtering dialog. In "Keywords" sub-dialog, choose "Audit Success". Click OK.
(v) Look at the results pane: Surprise, 0 Events! Do you really have no successful security monitoring events in your test log?
I’ll finish here. If you have a rich variety of events in your test log available, let your imagination run wild to test around. Finally include some simple manually created or modified XPath filters on the XML tab of the filtering dialog. I promise, you’ll
find a lot of additional strange results.
Problem 2: Cannot save manually selected events to .evtx file
Navigate to your "Forwarded Events" test log. In the results pane, select one or more events by highlighting them by mouse clicks. In context menu, choose "Save selected events". In the "save as" dialog, choose file type *.evtx
and save your file. Open the newly created file in event viewer. Result: Surprise, no events inside the new file!
Have more fun with forwarded events
Helmut

Did you mean that right click Forwarded Event and select "Filter Current Log..."? Since I can filter correct event vai the "Filter Current Log..." in my Lab environment.
Hi Justin,
yes, I mean "Filter Current Log ... " (in my German systems: "Aktuelles Protokoll filtern ... ").
What do you mean with "my Lab environment" exactly?
In the meantime, I performed additional tests. I copied the "ForwardedEvents.evtx" test file from Server 2008 R2 resp. Windows 7 to
(i) German Windows 8 Pro 64-Bit RTM
(ii) German Windows 8.1 Pro 64-Bit, up-to-date
in order to view and filter the file there.
Results: Same event viewer problem on Windows 8 RTM, but correct behavior on Windows 8.1!
Best regards, Helmut

Forwarded events log empty

Hi all,
I have a frustrating issue with forwarded events log which still empty when I change the location of this one to the D partition rather than the defaut setting C: (it works fine in C:)
once I change the location in the proerties of forwarded events to D: a new log is created but still empty.
Any ideas, please, Thanks

Hi Justin,
I checked the file key in the registry and I have well the new location set as value (D:\forwardedEvts.evtx)
In the event viewer, on the forwarded events I have this message "event
viewer cannot open the event log or custom view. verify that event log service is running or query is too long. access is denied (5)"
Thanks,

Forwarding events and clarifying events format information

Hello.
I've set up source initiated subscription for auditing file system usage. I need to know what files are added or deleted to the file share resource and by whom. So, subscription is working, and I get such kind of event on
source server:
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 08.07.2014 11:23:01
Event ID: 4663
Task Category: File System
Level: Information
Keywords: Audit Success
User: N/A
Computer: fileserver.example.com
Description:
An attempt was made to access an object.
Subject:
Security ID: EXAMPLE\username
Account Name: username
Account Domain: EXAMPLE
Logon ID:
Object:
Object Server: Security
Object Type: File
Object Name: *path_to_file_or_folder_here*
Handle ID:
Process Information:
Process ID: 0x4
Process Name:
Access Request Information:
Accesses: DELETE
Access Mask: 0x10000
The main thing I need from such event are username, path to file or folder and access information (delete here).
After transferring such event by event subscription the resulting event on the
collector server differs:
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 08.07.2014 9:54:42
Event ID: 4663
Task Category: File System
Level: Information
Keywords: Audit Success
User: N/A
Computer: fileserver.example.com
Description:
An attempt was made to access an object.
Subject:
Security ID:
Account Name: username
Account Domain: EXAMPLE
Logon ID:
Object:
Object Server: Security
Object Type: File
Object Name: *path_to_file_or_folder_here*
Handle ID:
Process Information:
Process ID: 0x4
Process Name: %12
Access Request Information:
Accesses: %9
Access Mask: %10
So, I have username and path here, but I don't have Process Name, Accesses and Access Mask information -
Access I need most of all, without it such event is useless.
Subscription format is Events (RenderedText doesn't bring normal description and writes The description for Event ID 4663 from source Microsoft-Windows-Security-Auditing cannot be found. Either the component that raises this event is not installed on
your local computer or...). Dll-s and registry paths are the same, only adtschema.dll.mui creation date differs, but there is no registry link to this file anyway. Windows version on collecting and sending systems are 2008 R2. Locales are the same (US). So,
it there any solution? Thanks in advance.
Update. Parsing XML view of the event shows, that <Data Name="AccessList">%%1537</Data>
corresponding to "DELETE" note in General view presents here, but it's not shown. It is shown on the source server. Also, events with Process Name field displayed correctly on the collecting server, but not all of the events has Process Name
field. Any ideas?

Hi Queequack,
To forward Events, please follow this article and feedback:
Quick and Dirty Large Scale Eventing for Windows
Best Regards,
Anna Wang

Cisco Context Directory Agent - Windows logs - Forwarded events

Hello,
I have a setup testing with Cisco ASA, Cisco CDA and MS 2012 R2. All this works fine. Only problem I encountered is that I want to read the forwarded events on the AD LDS server instead of the security events.
So in small words is it possible to connect CDA agent with wmi to forwarded events instead of security logs?
Is this possible?
Thanks,
Mark Post

Hi,
I applied the solutions mentioned above, but now i get the below error. Domain still shows as down.
wmi-property
exception-stack
org.jinterop.dcom.core.JIRemUnknownServer.call(JIRemUnknownServer.java:158)
org.jinterop.dcom.core.JIRemUnknownServer.addRef_ReleaseRef(JIRemUnknownServer.java:181)
org.jinterop.dcom.core.JISession.releaseRef(JISession.java:805)
org.jinterop.dcom.core.JIComServer.createInstance(JIComServer.java:777)
com.cisco.cda.rt.adobserver.adobserver.jinteropUtil.getWmiLocator(jinteropUtil.java:40)
com.cisco.cda.rt.adobserver.adobserver.EventsThread.QueryWMIProperty(EventsThread.java:83)
com.cisco.cda.rt.adobserver.adobserver.EventsThread.getNetBIOS(EventsThread.java:171)
com.cisco.cda.rt.adobserver.adobserver.EventsThread.extractDCData(EventsThread.java:203)
com.cisco.cda.rt.adobserver.adobserver.EventsThread.run(EventsThread.java:599)
dc-hostname
dc-name
exception-cause
java.net.ConnectException: Connection timed out
wmi-class
Win32_NTDomain
exception-message
An internal error occurred. [0x8001FFFF]
wmi-property
DomainName
dc-username
Any Idea on the error?
Thanks.

Interface Builder doesn't let me forward events to QC compositions???

The problem is:
Since this morning IB doesn't let me make standalone QC compositions with mouse input. The "forward all events" check box doesn't do anything:/. Its strange, everything was working just fine yesterday. I tried reinstalling developer tools, reseting IBs preferences and nothing helped. What's even stranger is that if i open the MouseTracking.nib from the QC examples folder and simulate, the mouse works fine. but if i uncheck and check "forward all events" then simulate again the mouse doesn't work anymore.
I don't get it:(.

Hi Yusuf,
first u have to get the PRODH from MARA for a give table then u have to get the text of PRODH frm T179T.
sample logic :
SELECT MARA~MATNR
       MARA~PRDHA
       FROM MARA
       INTO CORRESPONDING FIELDS OF TABLE I_MARA
       WHERE MARA~MATNR IN S_MATNR1.
SELECT PRODH
       VTEXT
       INTO CORRESPONDING FIELDS OF TABLE I_VTEXT
       FROM T179T
       FOR ALL ENTRIES IN I_MARA
       WHERE PRODH = I_MARA-PRDHA.
dont use Nested Select Stmts.
Regards
Prabhu

Forwarding events from my menubar class to main class

I'm brand new to swing. I'm trying write an app, and wanted to encapsulate my JToolBar and JMenuBar items, so I made classes to handle each of them. Then from my "main" class I could just call a function and voila.
However the one obvious problem is that my "main" class doesn't know when JToolBar or JMenuBar items have actions. Those classes each handle their own event listening. I was hoping (probably through magic) that I could then forward that action to the main class somehow.
The obvious solution would be to expose the individual toolbar JButtons and JMenuItems and call addActionListener(this) on those items from the "main" class. However I'm hoping to avoid having to expose those items, probably just because I'm anal.
One idea that I've seen but seems kind of not-very-elegant was to create an item to track the state of all things, and pass that item around. Then in my individual actionPerformed() functions I could manipulate that item so that the main class could see those changes.
I imagine I'll have this same issue when I get into more complicated parts of my would-be application than just the menubar. Any help would be appreciated.

OK so I can define the new actions in my main class and then in my toolbar/menubar items I just tell them to use those main class Actions? Hopefully I have as somewhat firm a grasp on this as I think I have. I'll try that out now.

Forwarding Events to a central syslog server.

I need to find an easier way to forward all IDS events to a central Syslog server. I am doing it a cheesy way now by running a macro against the IEV database and extracting the results from the exported file. I used to be able to do this with the Unix Director. Is there an easy way to do this? Is there a raw event file that I could directly transfer from the IDS Sensor?

The following document should give you a better idea,
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids10/idmiev/swchap4.htm#wp860304

Trouble forwarding event( s)

Hello,
I'm having some problem with forwarding the ActionEvent to calling class...
For example consider following Pad class
import java.awt.*;
import java.awt.event.*;
public class Pad extends Panel implements ActionListener
     private Button btn1 = new Button(" 1 ");
     private Button btn2 = new Button(" 2 ");
     public Pad()
          add(btn1);add(btn2);
          btn1.addActionListener(this);
          btn2.addActionListener(this);
     public void actionPerformed(ActionEvent v)
          Object parent = getParent();
          if(parent instanceof ActionListener)
          ((ActionListener)parent).actionPerformed(v);
}Now the following PadUser class works correctly...
import java.applet.*;
import java.awt.*;
import java.awt.event.*;
public class PadUser extends Applet implements ActionListener
     private Pad mypad = new Pad();
     public PadUser()
          add(mypad);
     public void actionPerformed(ActionEvent e)
          System.out.println("User pressed :"+ e.getActionCommand());
BUT if I made the following changes in the PadUser class then it fails...
public PadUser()
   Panel p = new Panel();
   p.add(mypad);
   add(p);
}Any thoughts....
Edited by: playwin2 on Jul 28, 2008 4:27 PM
Edited by: playwin2 on Jul 28, 2008 4:29 PM

Hello,
I think I found a solution.
Thanks.

Forward events to my iCalendar on mac from subscribed Gmail calendar

On my iPhone, I subscribe to my husband's gmail calendar. I see the events he invites me to. However, I do not see them on my macbook's iCalendar (I use iCloud). How do I forward those events on my iPhone to my iCalendar? (There is no edit button in the top right corner)

What version of Mac OS X are you running? If it's 10.7 or later, it's because your Calendars (and Contacts for that matter) are stored in "the cloud" (Apple's iCloud). In order to have the Calendars actually stored on your local hard drive, you need to head to System Preferences -> iCloud and turn off Calendars.
Then resync your iPod after verifying that it is configured to sync your Calendars from under its Info configuration tab in iTunes.
B-rock

Is it possible to configure AIP-SSM sensor to forward events to a syslog server

I have found documentation that describes how to configure SNMP and e-mail notifications using IME, but can't seem to find anything pertaining to syslog. Any suggestions would be greatly appreciated. Thanks.

The sensor OS does not support sending syslog messages.
You are limited to sending events via SDEE, SNMP and Email (as you have already discovered in your reading).
- Bob

Another JTable/buttons in cells query - event forwarding

Hi Everyone.
Apologies in advance for yet another thread on this subject. I realise this has been discussed a number of times but I can't find what seems like a definitive solution.
I understand what the fundamental issue is with putting JComponents in table cells - i.e. that the cells are rendered essentially as static visual entities, that they're not "components" as such and will not receive events.
I'd like to implement JButtons in table cells so that they behave as "normally" as possible - i.e. handle their own roll-over appearance, handle their own pressed appearance, and fire action events when pressed, with as little manual intervention in these mechanisms (e.g. in mouse listener code) as possible. I'm trying to do this by forwarding mouse events from the table to the button, but this doesn't seem to work as I'd hoped and I have various questions...
(Background: I have implemented JButton objects in the data model, and the getTableCellRendererComponent() method returns *(JButton)value*.)
My first question concerns the interception of mouse events. The usual technique would be to add a mouse listener and/or mouse motion listener to the table, and implement mouseClicked(), mousePressed() etc. However, can I override the table's processMouseEvent() and processMouseMotionEvent() methods instead, and from here forward events to buttons where appropriate, or process normally with super.processMouseEvent()? My motivation for doing this would be specifically not to invoke the super methods where events were forwarded to buttons - effectively consuming the event. Is this correct technique?
My second question concerns attempts to reproduce button roll-over appearances. The JTable is of course considered a single entity as far as mouse events are concerned, and MOUSE_ENTERED and MOUSE_EXITED events aren't generated as the pointer moves from cell to cell. Merely forwarding mouse events to buttons - which will mostly be MOUSE_MOVED events - seems to be insufficient and presumably the roll-over appearance change relies upon ENTERED and EXITED events occurring at the proper times.
I mimicked this behaviour in my override of processMouseMotionEvent() by calculating the value (i.e. JButton reference) of the cell under the mouse pointer, and if it wasn't the same as for the previous event, manually creating a MOUSE_ENTERED event and forwarding it to the new button. This seemed to work - the rollovers were happening (provided a table repaint() was performed), but it seemed to work without needing to explicitly sending a MOUSE_EXITED to the previous button before sending MOUSE_ENTERED to the new. I'm unclear why this is so - I was half-expecting both buttons to acquire the roll-over state, and they didn't.
Also, I had assumed that having taken care of this, I should forward MOUSE_MOVED events occurring within the confines of a cell's area to the button verbatim, but this seems to instantly cancel out any roll-over (visually the button would briefly flash a roll-over appearance as the pointer moved into its cell bounds). Why might this be so?
My last question is about the actual pressing of the button. I had hoped that forwarding MOUSE_CLICKED, MOUSE_PRESSED and MOUSE_RELEASED would cause the button to (a) acquire the button-pressed state, and (b) fire an action event to its action listeners. Neither of these things occur, and I don't understand why not.
In summary, is interception and forwarding of events like this a viable technique for implementing table cell buttons? The various solutions that a Google trawl throws up all reproduce button-pressing mechanics in varying degrees, some just detecting a click and calling some user function, others manually manipulating the button model in the mouse handler etc. If possible I'd like to avoid this, and leave as much processing as possible to the button's native code.
Thanks in advance for any suggestions received.
Regards,
A.

try to look on this
http://java.sun.com/docs/books/tutorial/uiswing/components/table.html#editrender

Windows Event forwarding - What is a "Valid destination log"

Hi all,
I'm currently setting up a centralization infrastructure for Windows events using the built-in event forwarding capabilities available in Windows Server 2008 R2.
One of my requirements is to be able to create several subscriptions on the collector machine and to store forwarded events in different log files. For that, I tested creating a custom log (called CustomLog). This log appears in the Event Viewer, under the
"Applications and Services Logs".
However, I am not able to redirect forwarded events to this CustomLog. CustomLog does not appear in the list of possible destination in the Event Viewer GUI to create a subscription.
To try what could be wrong, I left it with the default ForwardedEvents as destination and I tried to change it via Powershell. I ran the following command supposed to set the destination log as CustomLog:
wecutil ss "Collect from both sources" /lf:CustomLog
It ran without error. Though, no events were logged into CustomLog, and when I go back to the GUI to create/modify subscriptions and I try to open the subscription I set, I get a pop-up stating the following:
"The destination log defined in this subscription cannot be found in the list of valid destination logs on this computer. verify that this log exists on the computer and is valid as a destination for forwarded events. Note that classic logs, analytic
and debug logs and the Security log cannot be used as destination."
Does anybody know what a "valid destination log" is and how I could turn my CustomLog into such a valid destination?
Kind regards,
Mike
P.S. How can I verify my account in order to be able to post screenshots?

MikeSec, did you ever get an answer to this? I'm facing the same and wondered how to setup a custom log location for event forwarding also. Getting the same error as you "The destination log defined in this subscription cannot be found in the list of
valid destination logs on this computer. Verify that this log exists on the computer and is valid as a destination for forwarded events. Note that classic logs, analytic and debug logs and the Security log cannot be used as destinations."
Seems that there isn't a way to register new event-logs as valid destinations or channels for event-forwarding.

Eventlog Forwarding Issues - Either the component that raises this event is not installed on your local computer or the installation is corrupted.....

Hello all,
OK so I do have Event Forwarding working - but I've noticed that when it's first configured I get messages similar to:
The description for Event ID 104 from source Microsoft-Windows-Eventlog cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on
the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
The locale specific resource for the desired message is not present
If I alter the subscription (wecutil ss subname /cf:events) the forwarded events are rendered correctly.
However a product we are evaluating (which depends on event forwarding to work) always ends up with a couple of mal-rendered lines - always look something like:
Required Privs: %9
I built a standalone AD domain and joined the same 'problem' clients to this domain and re-configured Event Forwarding - there was no need to change the subscription format type to "events" and the events were forwarded correctly and also
the product we are looking at worked straight away.
It seems that when event forwarding is configured in our live domain (or any of the test labs we have) I always get the attached errors....
I've read a number of blogs that describe the issue and most recommend altering the subscription format - this however does not solve the issue entirely...
Has anyone else seen this issue and maybe found out how to resolve?
Thanks all
Carl

Yes,
I have ACS forwarder and OPSmgr Agent on Event log collector computer.
Event log collector computer shows some of the forwarded events incorrectly like "The
description for Event ID 104 from source Microsoft-Windows-Eventlog cannot be found"
When I change regional settings on Collector computer, event log shows all events(also previous) correctly.
Forwarded with ACS and Opsmgr Agent events
from collector computer were saved in DB correctly, even when event log show them incorrectly like "The
description for Event ID 104 from source Microsoft-Windows-Eventlog cannot be found"

JTree and real Components / event forwarding

Ok, so Ive seen some people forward events from JTree to node based Components.
I was just wondering, whether thats the right way to go.
Wouldn't it be better to write your own TreeLayoutManager, add the node based components with nodes as constraints to the the manager and add or remove them when the tree expands/collapses.
My only problem is, when to trigger the doLayout and how to get the proper node sizes. The only given value is the available width in the cellrenderer.
The cellrenderer would just return an empty, properly sized JLabel, and the "layoutmanager" would take care of the the real positioning.
That way I could have the painting speed benefits of a Jtree, combined with the flexibility of real components stored as nodes in it, right?
Well, I'm just looking for opinions on this.
Shoot :-D

Hi,
Thanks for your post.
>>What is meant by HeartbeatInterval and Max Latency Time?
Heartbeat Interval determines how often collector will check if source is still online,
MaxItems and MaxLatencyTime determine how source will batch items. In this example it will wait for 1 events or 1 seconds
<MaxItems>1</MaxItems>
<MaxLatencyTime>1000</MaxLatencyTime>
>>Next: When configuring the source computer i have to configure a Refresh time in the Policy key. (Computer Settings - Policies - Administrative Templates - Windows Components - Event Forwarding)
If you enable this policy setting, you can configure the Source Computer to contact a specific FQDN (Fully Qualified Domain Name) or IP Address and request subscription specifics.
If you disable or do not configure this policy setting, the Event Collector computer will not be specified.
>>when is this value being used for what? If I do not specify this refresh param, what is the default value?
In my view, it is connection refresh time, we must set this parameter, for example,
Use the following syntax when using the HTTPS protocol:
Server=https://<FQDN of the collector>:5986/wsman/SubscriptionManager/WEC,Refresh=<Refresh interval in seconds>,IssuerCA=<Thumb print of the client authentication certificate>
Meanwhile, i think you may ask in MSDN forums for technical support.
https://social.msdn.microsoft.com/Forums/en-US/home
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Forwarding Events

Similar Messages

Maybe you are looking for