- Newest
- Most votes
- Most comments
Hi there!
A couple of things to check:
- I don't know what version of windows you have but generally speaking, can you validate the credentials have the right permissions to access the instance?
- Verify the CloudWatch agent configuration.
I hope this helps.
thanks a lot for answering Now the Windows log is uploaded to CloudWatch, but the xml code is uploaded: "<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System>...........". The CloudWatch agent still reports an error "E! [windows_event_log] Failed to read Windows event logs for log group name Windows-Event. Details: XML syntax error on line 1: unexpected EOF"
I see, so the error is saying "unexpected EOF" which means that even know the XML is valid, it has no content. I would recommend to still check the CW agent configuration and additionally, try to find those entries in Event Viewer to compare the content. It may very well be that the log entries are indeed empty which would indicate a different problem (much harder to troubleshoot) with the instance. If Event Viewer shows content but CW Logs don't, then most likely the issue is with the agent. Alternatively you can try to re-deploy the agent if nothing else works.
I hope this helps.
Hi, you seem to have an issue on ec2 describe-tags issue by ec2 service when launching your instance https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-tags.html,
It's action DescribeTags (see https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html#amazonec2-actions-as-permissions) that seems to be missing in your defined credentials.
So, the best way to solve it to modify your defined IAM credentials with a looser definition for EC2 (Action:* and Resource:*) to see see if it goes through. Then, you can incrementally tighten them to restrict to allow really needed authorized actions.
Now the Windows log is uploaded to CloudWatch, but the xml code is uploaded: "<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System>...........". The CloudWatch agent still reports an error "E! [windows_event_log] Failed to read Windows event logs for log group name Windows-Event. Details: XML syntax error on line 1: unexpected EOF"
Relevant content
- asked 5 months ago
AWS OFFICIALUpdated 8 months ago- AWS OFFICIALUpdated 8 months ago
- AWS OFFICIALUpdated 9 months ago
- AWS OFFICIALUpdated 2 years ago
Now the Windows log is uploaded to CloudWatch, but the xml code is uploaded: "<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System>...........". The CloudWatch agent still reports an error "E! [windows_event_log] Failed to read Windows event logs for log group name Windows-Event. Details: XML syntax error on line 1: unexpected EOF"