EventTracker KB --Event Id: 10147 Source: Microsoft-Windows-WinRM

Event Id	10147
Source	Microsoft-Windows-WinRM
Description	The host name pattern ""%1"" is invalid and it will be ignored. Host name patterns must not be empty and they can contain at most one wildcard (""""). """" pattern can be used to indicate all hosts; if this pattern is used, no other pattern can show up in the list. Special string ""<local>"" can be used to indicate all host names that do not have a '.' User Action Correct the host name pattern using the syntax described above.
Event Information	According to Microsoft : Cause : This event is logged when the host name pattern is invalid and it will be ignored. Resolution : Correct host name pattern Fix the Trusted Host parameter using the following rules: Host name patterns must not be empty and they can contain at most one wildcard character (). The wildcard () pattern can be used to indicate all hosts. If this pattern is used, no other pattern can show up in the list. Special string "" can be used to indicate all host names that do not have a ".". Verify : Use the winrm command-line tool to request the WinRM service to verify that the service is listening on the network. To make a request, type winrm get winrm/config -r: , where computer is the name of the remote computer where the winrm service is running.
Reference Links	Event ID 10147 from Source Microsoft-Windows-WinRM

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.