Event Forwarding Communication Problem

[BastiaanvanOnselen]

Greetings,

 

I have a serious problem which i cannot solve.

The environment i manage is mixed environemt: XP, Vista, server 2003 R2 and 2008. The event collector is on a w2k8 machine. The sources subscribe to the collector by GPO. It worked fine untill 6 months ago. I manage this environment the last month. The previous system engineer who managed this environment is gone allready.

 

6 of the 172 computers have a Active subscription. The others are inactive. When i look into the eventvwr of these sources i see every hour event ID 105 source EventForwarder-Operational:

"The forwarder is having a problem communicating with subscription manager at address fqdn of my collector Error code is 8 and Error Message is The Function: "WinHttpSendRequest" failed unexpectedly. GetLastError=8. .

 

I did a rsop at the source to be sure the GPO is applied.

I did winrm id /r: /a:none

Result is IdentifyResponse Protocolversion = http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd

I did wecutil gr Result is the list of sources and most of them with a last heartbeat of 6 months ago.

 

Notable is the difference is the http schema address. I have no understanding how this works.

 

Hopefully someone can help me.

Thnks in advance!

Bastiaan