Send Knowledge Base Article
The article has been sent to your inbox successfully.
We never share your data
Netwrix Auditor System Health Log - Event ID 1004 / 1204
This article applies to Netwrix Auditor 6.0 and above. It explains the nature of the Event ID and provides resolution.
KB1918 | Last review: Nov 30, 2017 | Netwrix Auditor for SharePoint | Netwrix Auditor 6.0 and above
|Symptoms||Depending on your Netwrix Auditor version, the Netwrix Auditor System Health Log contains the following EventID
Netwrix Auditor 9.0 and above: 1204
Netwrix Auditor 8.5 and below: 1004
"Unable to establish connection to the remote WebService".
|Cause||This is a warning message, and does not lead to audit data loss if it is not accompanied by errors.
If this Event ID is logged with the following error in the description: "Could not connect to <URL>/_vti_bin/Netwrix/ManagementService.svc. TCP error code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond <address>", this is due to the following reason:
|Resolution||To resolve the issue do one of the following depending on the reason:.
Was this information helpful?