Problem: Login Breakdown not showing for users (or Advanced, Login tab is missing) and per-App network I/O missing as well.
Symptoms: Event Log on a desktop running the 5.8.0+ CID doesn't work and/or the Windows Event Log service is stopped or won't start. You will also see the following in C:\Program Files (x86)\Liquidware Labs\Connector ID\tntupdsvc_log.txt:
tntuidsvc[4868] 0 2015-10-05 16:01:14 tntudpsvc::starts.
tntuidsvc[4868] 1 2015-10-05 16:01:14 start_etw_session::Starts a session with type 1.
tntuidsvc[4868] 2 2015-10-05 16:01:14 start_etw_session::successfully
tntuidsvc[4868] 3 2015-10-05 16:01:14 start_etw_session::Starts a session with type 0.
tntuidsvc[4868] 4 2015-10-05 16:01:14 start_etw_session::Starts a session with type 1.
tntuidsvc[4868] 5 2015-10-05 16:01:14 start_etw_session::successfully
tntuidsvc[4868] 6 2015-10-05 16:01:14 start_etw_session::Trace already exist. <-----------This is the error to look for along with the start and stop taking less than 1 second.
tntuidsvc[4868] 7 2015-10-05 16:01:14 session_control::Stop a session NT Kernel Logger.
(and then it will keep repeating)
In addition, you may notice that stopping the 3 Liquidware Labs Connector ID services won't stop the tntupdsvc.exe process, nor can it be killed, as its hung waiting for Windows to allow the trace for the login breakdown details.
Possible Resolution:
Login Breakdown requires the Windows Event Log and service to be functional in order to grab the login details for Login Breakdown. Once this is corrected, you will begin getting these stats. Depending on the issue/reason for this, the solutions vary widely and best to search Microsoft's site for a fix to specific errors seen.
Product: Stratusphere FIT/UX
Product Version: 5.8.0+
Expires on: 365 days from publish date
Updated: Oct 27, 2015