Closed chsword closed 7 years ago
The same to u.
Is your Windows by any chance is not in english locale?
scollector can't parse w32time /querysntp result if it is not in english.
yes Chinese-Simplified
I had played with codepage to force w32tm to output english with not much luck.
So for now, I just disable the Windows TIme service or disable the sntp collector.
How do you disable the sntp collector?
Need *
first to match all, then subtract the sntp collector, i.e.
PS C:\Users\kbrandt> & 'C:\Program Files\scollector\scollector.exe' -f "*,-sntp" -l
Great, thanks. Also, when adding to scollector.toml, the right format looks to be:
Filter = ["*","-sntp"]
in the main section.
I got a error in Windows Event .
There is this error in windows 2008 r2 / windows 2012 r2 . And 386 / amd64 both has error.