Windows based user-ID agent not collecting mapping logs

Venkatesan_radhakrishnan — Thu, 13 Aug 2020 13:44:11 GMT

Hi Team,

We have installed the windows based user id agent on domain controller and created service account with necessary privileges following below guidelines.

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/user-id/map-ip-addresses-to-users/create-a-dedicated-service-account-for-the-user-id-agent.html

We are able to start the agent and it is running it is showing discovered active directories are connected but it is not collecting any information. We are not seeing any logs in the monitor tab of user id agent.

We have installed agent version 9.1.0. Double verified service account. I can see below error in UAdebug logs. But not sure what this is exactly and how to fix it.

i tried reinstall multiple times but no luck.

08/13/20 14:46:25:862[Error 698]: Failed to open my store. Error 5

Regards

Venky

Re: Windows based user-ID agent not collecting mapping logs

reaper — Tue, 18 Aug 2020 08:01:10 GMT

did you install the agent 'as administrotor' ?

have you tried the 'open cmd as admin, install from cmd' approach?

when you open the windows event log, are you able to see user logon events (logon success, ticket granted, ...)

topic Re: Windows based user-ID agent not collecting mapping logs in General Topics

Windows based user-ID agent not collecting mapping logs

Re: Windows based user-ID agent not collecting mapping logs