I have seen this before also. You may want to contact SolarWinds support and let them have a look and at least make them aware that this is happening. I think you should be able to setup an alert if the number of events over a specified period of time drops below a specified value. Also, if you aren't already you should probably be watching the system on at least a daily basis. SIEM systems are designed to be managed in perpetuity, it's the nature of the systems.
↧