The logs show similar to below:
Testing event capture on system HOSTNAME (1.1.1.1) through DPA DPA (2.2.2.2)
Task exited with return code 3.
Testing SSH connectivity to 1.1.1.1:22 using funacct
SSH connectivity test passed
Testing if OS variant is supported
Unsupported OS variant
Operating system: Linux localhost 2.6.27.19-5-default #1 SMP 2009-02-28 04:40:21 +0100 x86_64 x86_64 x86_64 GNU/Linux
Checking for command to list processes...
Check command 'ps -ef'
Failed: Cannot find header line
Checking for command to list network connections...
Check command 'netstat -ntp'
Failed: Cannot find header line
Check command 'lsof -i -n -P'
Failed: Cannot find header line
Log on the system as your functional account, and ensure that the commands such as ps -ef work and return valid data.
If you are using a sudo as a Delegation Prefix for the System (Details | Information tab), ensure that your sudoers file has been configured to allow the functional account access to the required commands, such as ps.
For more information on the requirement for Event Capture, see the below KB107772
https://support.quest.com/privileged-session-manager/kb/107772
You may also observe this error when the sudo configuration has not been done correctly for the functional account with the NOPASSWD switch.
e.g funcacct ALL=(root) NOPASSWD:path to executable
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center