Overview

This article lists the improvements and fixes that came with the GFI EventsManager 2012 (Build 20111130) release.

Environment

GFI EventsManager 2012

Improvements:

Included new file storage engine enabling EventsManager 2012 to store and process much more data than previous versions. SQL Server is NOT supported as a database backend anymore.
Added a new reporting engine that allows better customization and faster generation of reports.
Added drill down browsing and global search through all events.
Added database encryption and compression.
Syslog collector now supports message parsing based on regular expressions.
Added support for scanning text logs based on regular expressions.
Unified events browsing and events processing rules.

Known Issues:

Some display issues on Chinese machines (date and time not formatted properly, some characters are displayed as "?").
Custom browse queries are not imported correctly from previous versions in some cases (e.g. conditions on computer name).
Conditions on the file name in W3C processing rules are not imported correctly from previous versions.

System Requirements:

Software requirements - Installation machine(s):

.NET Framework 4.0
To properly scan Windows Vista or newer machines, GFI EventsManager must be installed on a Windows Vista or newer machine.

Software requirements - Scanned machine(s):

Windows event log scanning:
- For Vista and newer machines, remote event log management must be enabled.
- For Vista and newer machines, UAC (User Account Control) must be disabled and the machines must be within the same domain.
- For pre-Vista machines, the remote registry must be enabled.
- Windows audit service must be enabled.
W3C log scanning:
- The source folders must be accessible via Windows shares.
Syslog and SNMP Traps:
- Sources/senders must be configured to send messages to the computer/IP address where GFI EventsManager is installed.

The latest version of GFI EventsManager can be downloaded by visiting the download page.