Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Agent Offline Rule- recieving alerts but server is up

$
0
0

Could be any number of issues, as curtisi pointed out.  Anything which interrupts the connection between the agent and manager.

 

A sure way of knowing is by looking at the insertion time and detection time.  If those two times are more than a few seconds apart - there was a disruption in communication and the agent is sending the queued data.

 

If you are receiving syslog from the routers/switches - are you seeing any interface down/up messages?  or route changing messages?


Viewing all articles
Browse latest Browse all 5385

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>