Skip to main content

Corrupt ErrorEvent in Event Reports

Symptoms​

  • The events report in Netwrix Change Tracker contains one or more ErrorEvent events. Their description states Corrupt.
  • Agent logs (see Rolling-Log File Location) contain the following line:
    • Windows: C:\ProgramData\NNT\gen7agent.app.netcore\rolling-log.txt
    • Linux: /var/nnt/gen7agent.app.netcore/rolling-log.txt
[timestamp] ERROR AgentTaskRunner - task execution failed for task %#% - %task_name% [timestamp]

Cause​

The agent directory on affected devices contains multiple conflicting Config-*.xml files. These files cause conflicts in device agent events.

Resolution​

NOTE: You can establish the affected agents via the events report—review the DeviceName and AgentID column values.

Perform an agent reset to reconfigure affected agents:

Windows​

  1. Stop the Netwrix Change Tracker Agent Service.

  2. Navigate to the agent directory (see Rolling-Log File Location): C:\ProgramData\NNT\gen7agent.app.netcore\

  3. Right-click the Hubdetails.xml file and select Edit.

  4. Replace the <E1> tag pair with the <Password> tag pair. Replace the contents with the current agent account password, as defined on your Netwrix Change Tracker Hub Server. Save the changes.

  5. Start the Agent Service.

Linux​

  1. Stop the Netwrix Change Tracker Agent Service:
service nntgen7agent stop

  1. Navigate to the agent directory (see Rolling-Log File Location): /var/nnt/gen7agent.app.netcore/

  2. Edit the Hubdetails.xml file.

  3. Replace the <E1> tag pair with the <Password> tag pair. Replace the contents with the current agent account password, as defined on your Netwrix Change Tracker Hub Server. Save the changes.

  4. Start the Agent Service:

service nntgen7agent start