Forum Discussion
Azure ATP Sensor Log Errors
We are seeing to errors repeatedly in the Microsoft.Tri.Sensor-Errors.log file. We have the agent installed directly on the domain controllers. Does anyone have insight into what these mean or how t...
EliOfek
Microsoft
MicrosoftThe first error you found says we fail to read the security log, probably due to permissions.
During deployment we add read permissions to the log, looks like it either did not work or overridden later.
Try to uninstall the Sensor, then reinstall (keep the deployment logs! ) and see if it resolves the issue.
For the second case, if you have only few of these errors, you can ignore them, if you have a lot, then:
Are you running on vmware? if so, did you remember to disable TSO offload?
