Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1024 Source: HPOV-MAA

Source
Level
Description
Initialization of policy <policy> failed. (OpC30-727).
Comments
 
This is an Openview generated error and appears to be mostly benign in some of the later windows agents, version 7.26+. This happens because the timeout for the policies is rather short. One of the fixes I saw on a forum was:

Create a Node Info policy (which is inserted into the NODEINFO file on each agent the policy is deployed on) with the following lines:
POLICY_MIN_TIME_WAIT 10
POLICY_MIN_INTERVALS_WAIT -1
FAILED_COLLECTION_RETRIES 3
These settings will take effect after the agent is restarted. The last two lines are default settings (I just put them there for consistency). The first line increases the wait time for the external process from 2 minutes to 10 minutes. The other was to increase the priority of the OPCAgent to something greater than default (below normal). There is also talk that HP will be working on changing the agent in future releases to trim back these errors.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...