Has anyone ever seen where a node being polled with ICMP only shows "stopped responding" or "responding again" events without the other? This is at a remote site, would it be affected if the route between our site and the remote site was down? Wouldn't it just show "stopped responding" once?
Date time
Event
1/25/2019 6:51 AM
ecnbu1.uwsp.edu is responding again. Response time is 13 milliseconds.
1/25/2019 6:18 AM
1/19/2019 8:40 AM
1/19/2019 7:52 AM
ecnbu1.uwsp.edu has stopped responding (Request Timed Out)
1/19/2019 7:51 AM
1/19/2019 7:50 AM
1/19/2019 7:49 AM
1/15/2019 5:19 AM
1/15/2019 5:16 AM
1/12/2019 6:35 AM
1/9/2019 5:14 AM
ecnbu1.uwsp.edu is responding again. Response time is 13 milliseconds
I've definitely seen this in some of my reports when i try to correlate down events to up events, I also had a client who told me he had a really bad time with this for a while that was resolved with a hotfix about a year ago. Not sure if you are running the latest release?
We are running the latest and greatest.
There is theory that this may be more related to network connectivity to the remote site than Orion's reporting... If we ever figure this out I'll update the post.