IBM Support

QRadar: WinCollect Agent is Displaying Error code 0x06D9

Troubleshooting


Problem

The WinCollect Agent and Log Source are configured using default values and an error Code 0x06D9 is displayed in the Windows device logs.

Symptom

Look in windows device logs for a similar error message.

017-04-28 13:09:27,255 ERROR Device.WindowsLog.W2K8.192.168.1.23.System : Error executing <QueryList><Query Id="4" Path="Security"><Select Path="System">* and *[System[TimeCreated[@SystemTime &gt; '2017-04-28T16:09:24.676000595Z']]]</Select></Query></QueryList>  -- Error code 0x06D9: There are no more endpoints available from the endpoint mapper.
2017-04-28 13:09:27,515 ERROR Device.WindowsLog.W2K8.192.168.1.23.Security : Error executing <QueryList><Query Id="4" Path="Security"><Select Path="Security">* and *[System[TimeCreated[@SystemTime &gt; '2017-04-28T16:09:24.676000595Z']]]</Select></Query></QueryList>  --  Error code 0x06D9: There are no more endpoints available from the endpoint mapper.
2017-04-28 13:09:27,822 ERROR Device.WindowsLog.W2K8.192.168.1.23.Application : Error executing <QueryList><Query Id="4" Path="Security"><Select Path="Application">* and *[System[TimeCreated[@SystemTime &gt; '2017-04-28T16:09:24.674999237Z']]]</Select></Query></QueryList>  --  Error code 0x06D9: There are no more endpoints available from the endpoint mapper.

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"WinCollect","Platform":[{"code":"PF033","label":"Windows"}],"Version":"7.2;7.3","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
10 May 2019

UID

swg22010867

Page Feedback