Windows Event Collection Point of Sale

We are attempting to implement Windows Event Collection in a very secure environment. In attempting to use a source initiated subscription, we are allowing 5985 outbound from a firewall to the WEC server, but, not inbound 5985.
the subscription appears fine both on the WEC server itself (green circle with arrow) and using the command line tools. Nevertheless, event logs are NEVER forwarded.
When using HTTP, does 5985 have to be allowed ingress and egress? If so, is there any possible workaround? We would prefer the WEC server not communicate with the terminals at all, but, only have the terminals forward their logs to the WEC.
Thanks in advance for any assistance.
Jake

I'd try them over here.
https://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/home?forum=perfmon%2Cnetmon&filter=alltypes&sort=lastpostdesc
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Similar Messages

Labview 2010 randomly restarts computer - windows event viewer points to nap agent

When running my current VI that I am working on, the computer will ranomly reboot. There is no freeze, or blue screen, just a reboot. When examining the windows event viewer after the reboot, the following warning is listed immediately preceding the reboot:
Event ID 39
The Network Access Protection Agent was unable to determine which HRAs to request a health certificate from.
A network change or if GP is configured, a configuration change will prompt further attempts to acquire a health certificate. Otherwise no further attempts will be made.
Contact the HRA administrator for more information.
Previous to getting this warning before a reboot, I was getting the following error:
Event ID 10016
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security permission can be modified using the Component Services administrative tool.
This is a DCOM service eror and the CLSID is referring to NAPAGENT. So I configured DCOM to allow the NAPAGENT to start and now I get the Event ID 39 warning and still get the reboot.
I am not sure why labview is even asking for DCOM or NAPAGENT to start at all. My VI is simply reading information from two serial instruments.
This reboot behavior does not occur when the computer is not running labview.
I am attaching a copy of the main VI, if it will be helpful I can post the sub VI's as well.
Thanks in advance for your help.
-Justin Lee
Attachments:
testscan10.8.vi ‏179 KB

Hi Joe,
Thanks for the reply.
I am running windows XP pro service pack 3.
I am running a standard instal of labview 2010 with the latest VISA drivers, no other modules or options installed.
I am only reading and writing to the serial ports (com) in my code. I don't believe that virus/spyware/malware is to blame for several reasons.
1. This only occurs when running this VI in labview.
2. I have replicated this problem on another computer.
3. I am behind a government (DOE) firewall and virus scans and checks are performed constantly.
4. If I take out the serial portion of my code via a T/F case structure, it will not crash.
The code will run fine for sevetral hours sometimes and then crash, other times it will crash after only a few minutes.
Please let me know what other information you require.
Thanks!
Justin Lee

Yoga Tablet 2 With Windows 8.1 as a Point of Sale Device and Clerking an Auction

First of all, the touch response within Windows 8.1 is excellent. I do physical labor and my hands have a lot of calluses and scars on them and I've always had problems using touchscreens. It's thus a joy to use this tablet with Windows, as I must say that the touch response is excellent.
Clerking an auction in the company I am with using Android and Windows are pretty much similar. However, the differences come at the end of the auction during checkout. Using Android, the bidders still have to queue up at the checkout counter to have their credit cards scanned and their pick tickets and receipts printed. With the Yoga 2 with Windows, I can scan their cards with a Windows app and the camera and print their receipts wirelessly through our wireless printer.
We recently opened a store in the auction facility and decided to use the auction program as a Point of Sale application. We figured we could use tablets and the program would give us a good accounting of sales and expenses and inventory control. It worked!! We've been using tablets for awhile now and was able to do away with all the paper except for the pick tickets and receipts.
To start with, we have to enter the inventory in the system. It's time consuming with pen and paper, it all has to be counted and then transferred into the computer. Using the tablet, it's counted and entered into the system all at once and there's even the ability to take a picture of the item being counted and entered also. Each item is assigned an item number which is labeled on that item. We also take consignments, we have the ability to list the products by consignors and generate a report so we know what we need to pay the consignor at any given time.
(The Yoga Tablet 2 with the dashboard open. The Yoga Tablet 2 is on the left.)
Anybody who wants to purchase an item in the store or bid on an item at one of our auctions has to register and be issued a buyers number or a bidder number. We can enter their email address on this form and send them coupons or sale notices. A buyer or bidder can opt out of this if they so desire.
Once a buyer is registered, they are now free to purchase an item in the store or bid on an item in an auction. For the most part, this is the window that a clerk will see.
Once the items are sold to the buyer, then it is time to check out. Enter the buyer number in the box and options will come up to pay, either by cash, check, credit card or Paypal and this is where a tablet with Windows comes in handy because Windows will recognize a credit card scanner and will print receipts wirelessly to an online printer. Android will also scan a credit card, but I haven't been able to get Android to print from an online printer yet.
The Yoga 2 makes an excellent Point of Sale device, it is light, fast, small, and it runs cool. There is a video below that shows the hands on experience.
Thank you Lenovo for giving me the opportunity to try this out.
The Yoga Tablet 2 as a Point of Sale device.

So nice ! I like this new tablet and description product and the youtube video is more comprehensive and explanatory.

How to write to windows event logs from determinations-server under IIS

This is just an FYI technical bit of information I wish someone had shared with me before I started trying to write OPA errors to the windows event log... Most problems writing to the windows event log from log4net occur because of permissions. Some problems are because determinations-server does not have permissions to create some registry entries. Some problems cannot be resolved unless specific registry entry permissions are actually changed. We had very little consistency with the needed changes across our servers, but some combination of the following would always get the logging to the windows event log working.
To see log4net errors as log4net attempts to utilize the windows event log, temporarily add the following to the web.config:
<appSettings>

<add key="log4net.Internal.Debug" value="true"/>
</appSettings>
<system.diagnostics>
<trace autoflush="true">
<listeners>
<add
name="textWriterTraceListener"
type="System.Diagnostics.TextWriterTraceListener"
initializeData="logs/InfoDSLog.txt" />
</listeners>
</trace>
</system.diagnostics>
To add an appender for the windows event viewer, try the following in the log4net.xml:
<appender name="EventLogAppender" type="log4net.Appender.EventLogAppender" >
<param name="ApplicationName" value="OPA" />
<param name="LogName" value="OPA" />
<param name="Threshold" value="all" />
<layout type="log4net.Layout.PatternLayout">
<conversionPattern value="%date [%thread] %-5level %logger [%property{NDC}] - %message%newline" />
</layout>
<filter type="log4net.Filter.LevelRangeFilter">
<levelMin value="WARN" />
<levelMax value="FATAL" />
</filter>
</appender>
<root>
<level value="warn"/>
<appender-ref ref="EventLogAppender"/>
</root>
To put the OPA logs under the Application Event Log group, try this:
Create an event source under the Application event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
4.     Right-click the Application subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Close Registry Editor.
To put the OPA logs under a custom OPA Event Log group (as in the demo appender above), try this:
Create an event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the eventlog subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Right-click the new OPA key and add a new DWORD called "MaxSize" and set it to "1400000" which is about 20 Meg in order to keep the log file from getting too large.
7.     The next steps either help or sometimes cause an error, but you can try these next few steps... If you get an error about a source already existing, then you can delete the key.
8.     Right-click the OPA subkey, point to New, and then click Key.
9.     Type OPA for the key name.
10.     Close Registry Editor.
You might need to change permissions so OPA can write to the event log in Registry Editor. If you get permission errors, try following these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the EventLog key, select Permissions.
5.     In the dialog that pops up, click Add...
6.     Click Advanced...
7.     Click Locations... and select the current machine by name.
8.     Click Find Now
9.     Select both the Network user and IIS_IUSERS user and click OK and OK again. (We never did figure out which of those two users was the one that fixed our permission problem.)
10.     Change the Network user to have Full Control
11.     Click Apply and OK
To verify OPA Logging to the windows event logs from Determinations-Server:
Go to the IIS determinations-server application within Server Manager.
Under Manage Application -> Browse Application click the http link to pull up the local "Available Services" web page that show the wsdl endpoints.
Select the /determinations-server/server/soap.asmx?wsdl link
Go to the URL and remove the "?wsdl" from the end of the url and refresh. This will throw the following error into the logs:
ERROR Oracle.Determinations.Server.DSServlet [(null)] - Invalid get request: /determinations-server/server/soap.asmx
That error should show up in the windows event log, OR you can get a message explaining why security stopped you in "logs/InfoDSLog.txt" if you used the web.config settings from above.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
Edited by: Paul Fowler on Feb 21, 2013 9:45 AM

Thanks for sharing this information Paul.

Operations Manager Failed to Access the Windows Event Log and management server is showing warning state

Hi,
I am monitoring AD server from SCOM 2012 R2. My management server goes into waning state. When i run Health explorer then it come back in the healthy state but after some time it again goes into warning state. After seeing alert i found that a alert is coming
again and again i.e. Operations Manager Failed to Access the Windows Event Log.The description of alert is mention below
The Windows Event Log Provider is still unable to open the DhcpAdminEvents event log on computer 'nc2vws12ad5.corp.nathcorp.com'.
The Provider has been unable to open the DhcpAdminEvents event log for 64080 seconds.
Most recent error details: The RPC server is unavailable.
Please suggest me how to resolve this so that my management server will again come back in healthy state.
Thanks
Abhishek

Hi Abhishek,
As i mentioned earlier the Alert resolution says the same points.
Can you give details on the below ?
Is there really a log named "Dhcpadminevents" in the MS's Event viewer ?
Did you recently configure any new alert where you mentioned "Dhcpadminevents"
as a event log location ?
If yes then what is the target you selected for the rule / monitor there ?
Can you post the results for analysis ?
Gautam.75801

Need to generate a report for Event collection rules created in SCOM

Hi All,
Can any one let me know where can i get a report of the Event based collection rules created in SCOM (For default and custom made).
I used the below report but it gives the collection rules which are performance counter based not event collection based.
Reporting -> Microsoft Generic report library ->Performance detail (Gives performance based Collection rule but not event based). Can any one help.
Gautam.75801

what is your objects setting?
Suppose, I want to display the Windows Restart Event which is collected by "collection rule for windows Restarted Events" . from the Rules pane in Authoring workpsace, "collection rule for windows Restarted Events" is target on windows
Server Operating system. As a result, my "custom event" report setting as
1) Objects: objects instance of windows Operating system
2) rules filter by rules name contains "windows Restarted Events"
Roger

Windows Event forwarding - What is a "Valid destination log"

Hi all,
I'm currently setting up a centralization infrastructure for Windows events using the built-in event forwarding capabilities available in Windows Server 2008 R2.
One of my requirements is to be able to create several subscriptions on the collector machine and to store forwarded events in different log files. For that, I tested creating a custom log (called CustomLog). This log appears in the Event Viewer, under the
"Applications and Services Logs".
However, I am not able to redirect forwarded events to this CustomLog. CustomLog does not appear in the list of possible destination in the Event Viewer GUI to create a subscription.
To try what could be wrong, I left it with the default ForwardedEvents as destination and I tried to change it via Powershell. I ran the following command supposed to set the destination log as CustomLog:
wecutil ss "Collect from both sources" /lf:CustomLog
It ran without error. Though, no events were logged into CustomLog, and when I go back to the GUI to create/modify subscriptions and I try to open the subscription I set, I get a pop-up stating the following:
"The destination log defined in this subscription cannot be found in the list of valid destination logs on this computer. verify that this log exists on the computer and is valid as a destination for forwarded events. Note that classic logs, analytic
and debug logs and the Security log cannot be used as destination."
Does anybody know what a "valid destination log" is and how I could turn my CustomLog into such a valid destination?
Kind regards,
Mike
P.S. How can I verify my account in order to be able to post screenshots?

MikeSec, did you ever get an answer to this? I'm facing the same and wondered how to setup a custom log location for event forwarding also. Getting the same error as you "The destination log defined in this subscription cannot be found in the list of
valid destination logs on this computer. Verify that this log exists on the computer and is valid as a destination for forwarded events. Note that classic logs, analytic and debug logs and the Security log cannot be used as destinations."
Seems that there isn't a way to register new event-logs as valid destinations or channels for event-forwarding.

Lots of Anyconnect Error Message in Windows Event Log

Hi Community.
We have lots of Anyconnect Error Messages in the Windows Event Log. Following two examples.
Can anyone tell me why these errors appears and how do I fix them ? I already installed the newest Anyconnect on my machine.
Thanks in advance and Kind Regards Patrick
Example 1
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97564</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::logProbeFailure File: .\NetEnvironment.cpp Line: 1432 Invoked Function: CHttpProbeAsync::SendProbe Return Code: -27066354 (0xFE63000E) Description: HTTP_PROBE_ASYNC_ERROR_CANNOT_CONNECT HTTP (host: 109.164.211.237)</Data>
</EventData>
Example 2
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97565</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::TestAccessToSG File: .\NetEnvironment.cpp Line: 1385 Invoked Function: CNetEnvironment::analyzeHttpResponse Return Code: -28966899 (0xFE46000D) Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target</Data>
</EventData>

HI and welcome to Discussions,
in my personal opinion there is not much for you to worry about.
The 'Windows Tool for the elimination of malware' is nothing you miss as long as you have a decent Anti-Virus Software running.
The update for the IE 7 might be missing an installed IE 7, which can do by downloading it yourself from Microsofts webpage.
If you don't use the IE but something like Firefox or Opera or Safari, than don't bother with these update.
Stefan

Window.event does not working in Firefox 4.0 and also window.event.ctrlKey ?

hi,
I'm using Microsoft virtual earth map 6.2 (bing Map) in my application.On map showing number of images.On Each image there is onClick event that select image if user press left mouse button while holding Ctrl key .For this I wrote java-script function where I'm using Window.event.button (To check mouse button) and window.event. ctrlKey(To check control key) But these both are not working in Firefox 4.0 ,the same is working in Firefox 3.6X version perfectly.
Thanks

The same problem is in Firefox 5.0 version too

While Installation of 11g database creation time error ORA-28056: Writing audit records to Windows Event Log failed Error

Hi Friends,
OS = Windows XP 3
Database = Oracle 11g R2 32 bit
Processor= intel p4 2.86 Ghz
Ram = 2 gb
Virtual memory = 4gb
I was able to install the oracle 11g successfully, but during installation at the time of database creation I got the following error many times and I ignored it many times... but at 55% finally My installation was hanged nothing was happening after it.....
ORA-28056: Writing audit records to Windows Event Log failed Error and at 55% my Installation got hung,,,, I end the installation and tried to create the database afterward by DBCA but same thing happened....
Please some one help me out, as i need to install on the same machine .....
Thanks and Regards

AAP wrote:
Thanks Now I am able to Create a database , but with one error,
When I created a database using DBCA, at the last stage I got this error,
Database Configuration Assistant : Warning
Enterprise Manager Configuration Failed due to the Following error Listener is not up or database service is not registered with it. Start the listener & Registered database service & run EM Configuration Assistant again....
But when I checked the listener was up.....
Now what was the problem, I am able to connect and work through sqlplus,
But I didnt got the link of EM and when try to create a new connection in sql developer it is giving error ( Status : failure - Test Failed the Network Adapter could not establish the connection )
Thanks & Regards
Creation of the dbcontrol requires a connection via the listener. When configuring the dbcontrol as part of database creation, it appears that the dbcontrol creation step runs before the dynamic registration of the databsase with the listener is complete. Now that the database itself is completed and enough time (really, just a minute or two) has passed to allow the instance to register, use dbca or emca to create the dbcontrol.
Are you able to get a sqlplus connection via the listener (sqlplus scott/tiger@orcl)? That needs to be the first order of business.

Need help in Point-of-Sales software developing guide

i was required to developed a new Point-of-Sales software for my new company. however, i do not know where to start. i'm new to POS software, so if anyone who has experience in Point-of-sales software development, plz drop a hint or two for me.
i guess the biggest problem for me is to detecting and communicating with the Barcode Scanner, Receipt printer, Cash Drawer and Pole Display. i would appreciate for the advise on how to achieve this.
tks

well, the things is like this:
the existing system is actually maintain by the ex-staff of the company. however, due to some unknown circumstances, all of them left within a very short period of time. and now, we were hired.
the whole things a mess. bugs everywhere. so the only solution the management would accept is to re-develop the whole POS and Inventory system. but non of us have any experience in developing such system and we don't have any documentation for the existing system. Now the management would like to see a prototype, a simple POS system that can perform simple operation - scan barcode, display the price at the pole display, 'kick-out' the cash drawer and print the receipt.
i have done a bit part of research, download some Java-based POS such as JPOS, JavaPOS, and FreeMercator. but i don't really get the idea of how to communicate with the devices. and now the management decided to change all the POS peripherals, so i can tell which brand that we are going to use.
for your question:
Do you already have an inventory control system in place? yes, but no good. no doc as well.
If so you'll want to integrate with that, which could get hairy depending on the system. What's your intended architecture? each store will have their own database. however, they will export their data to the HQ every morning before business hour. the export process of the current system is to extract the data from the database to MS Access DB, then send to the HQ through email.
May I ask why you chose Java to develop this system in?Linux + Postgre + Java = minimum development cost. the company wanted to keep cost at the minimum level.
actually, i do not worry bout the inventory system. all i care is how to communicate with the devices, because this is the first time that i deal with all these POS devices.
besides, i'm not sure if i have to pay attention to any thing like drivers, or whatever standard, etc... and it will be the most appreciate if you can show me (or links to websites) some sample of how to detect and communicating the devices.
lastly, many tks to you for your advice ;)
have a nice day
Jerry

Urgent help needed on writing errors in to windows events application logs

Hi all,
we have web based application. Whenever there is critical errors encounters in our application we need to write that errors in to windows
event viewer, application logs. Please help me on how to do this.
do we have any specific API for this ?
thanks in advance
Shivakumar

You should use WinAPI to do so. Asking in JNI forum (or specialized WinAPI forum) for more details is good idea I think.

Illustrator CC crashes on startup(windows event viewer message included)

Windows event viewer shows like this...
System
Provider
[ Name]
Application Error
EventID
1000
[ Qualifiers]
0
Level
2
Task
100
Keywords
0x80000000000000
TimeCreated
[ SystemTime]
2013-12-09T06:35:08.000000000Z
EventRecordID
71639
Channel
Application
Computer
HPNB-dhleeNB
Security
EventData
Illustrator.exe
17.0.0.260
52822426
ntdll.dll
6.1.7601.18247
521ea8e7
c0000374
000ce753
a690
01cef4a8afb2dd09
C:\Program Files (x86)\Adobe\Adobe Illustrator CC\Support Files\Contents\Windows\Illustrator.exe
C:\Windows\SysWOW64\ntdll.dll
0b8a3ab7-609c-11e3-8e0d-005056c00008
Please help.

Problem solved.   Refer to below.
3 posts
Nov 25, 2013
2.AlanDrVita,
Nov 26, 2013 9:16 AM   in reply to outdoorz
Report
I may have been able to resolve my issue. I held shift while opening Illustrator and opened it in a bare bones mode, then closed it and reopened it without getting the error message. Good luck to you.
Was this helpful? Yes   No

Error in starting nidevldu and nipxirmu services (windows event viewer)

A computer running Windows XP SP1 and a Visual basic (V6.0) application that I've developped had crashed several times. I've seen lots of errors in the Windows event viewer saying that the nidevldu and nipxirmu services were trying to start (exact french message : Le service nidevldu est en attente de démarrage et Le service nipxirmu est en attente de démarrage). These messages are real errors (not warning or informations).
I use a 6034E PCI card, Visual basic V6.0 and NI-DAQ 7.4.
The crashes I've seen may be linked with this problem.
Is there a solution?

Hi,
I think that you are not going to be starting and stopping the devldu service in normal circumstances... due to crashes !
The firsts steps you have to focus on is to optimize your program in order to avoid crashes, which is not a normal way of work I guess. Then you will be able to avoid these messages!
Regards,
David D. - Application Engineer - NI

Can't be modify the value of window.event.keyCode in IE 11(Windows 7 Premium) where as in IE 8 (Windows XP) its working fine

The following is the sample code whcih I have used to check.<%@ page language="java" contentType="text/html; charset=ISO-8859-1"
pageEncoding="ISO-8859-1"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Sample Form</title>
<script type="text/javascript">
function keyDownEvent() {
alert("KD:"+window.event.keyCode);
window.event.keyCode=0;
alert("KD:"+window.event.keyCode);
function keyPressEvent() {
alert("KP:"+window.event.keyCode);
window.event.keyCode=0;
alert("KP:"+window.event.keyCode);
</script>
</head>
<body>
<form>
<input type="text" onkeydown="keyDownEvent()" onkeypress="keyPressEvent()" />
</form>
</body>
</html>
Kindly post your answers, am waiting for answers...

This is the TechNet Forum for questions regarding
Internet Explorer 8, 9, 10, 11 for the IT Pro Audience. Topics covered are: Installation, Deployment, Configuration, Security, Group Policy, Management questions.
For better assistance please ask for help in the MSDN
IE Development Forums.
Thanks & Regards,
Vincenzo Di Russo
Microsoft® MVP Windows Internet Explorer, Windows & Security Expert - since 2003.
Moderator in the Microsoft Community and TechNet Forums
My MVP Profile

Windows Event Collection Point of Sale

Similar Messages

Maybe you are looking for