I enabled the agent offline alert to make sure all machines stayed connected (duh). But I have a handful of servers that are spamming me saying the agent is offline. Insertion and detection times are the same, and the service is sup and no sign of it restarting in the event viewer.
I have tried modifying the alerting time, to no avail.
Current rule looks like this:
Conditions must happen
1 times within 30 seconds
Applying to this part of the rule
InternalAgentOffline.AgentAddress is in All Installed Agents
and
Conditions must happen
1 times within 30 seconds
In response window
5 minutes
Applying to this part of the rule
InternalAgentOffline.AgentAddress is in All Installed Agents
Any help is greatly appreciated!