Netwrix Auditor summary report contains the “Failed to process DC: %Domain controller name%. The error is: .Event collection failed: Event log read failure. Error details: Data error (cyclic redundancy check). Error number: 0x80004005” error.
This error indicates that Netwrix Auditor cannot read the Security event log on the monitored domain controller. Usually, this error occurs if the Security event log file is corrupted or there is antivirus software which blocks the connection and reading attempts.
- If you have any kind of antivirus software that is running on the domain controller the error was generated for, please disable it and see if the error is reproduced. If the error stops appearing, add the appropriate exclusions to the antivirus software for the Netwrix Auditor installation directory.
- If you do not have antivirus software on the problematic domain controller or you disabled the antivirus software but the error keeps appearing, this may indicate that the Security event log is corrupted. To resolve this issue please clear the Security event log on the problematic domain controller:
- Log onto the problematic domain controller
- Open Event Viewer, right-click the Security event log and select “Clear log…”