This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Agent Offline Rule- recieving alerts but server is up

this is a rule came in the box and until last couple of days, we were only getting the alerts when servers actually getting re-booted after patch or manually. however, started getting alerts regularly now even the agent servers are up and running ok.

any idea why we are getting alerted with agent offline more???

  • Is there anything that may be interrupting network traffic (flapping ports, duplicate IPs, etc) that may prevent the LEM from seeing the Agent for a few minutes at a time?  Or is the service bouncing?

  • Could be any number of issues, as curtisi pointed out.  Anything which interrupts the connection between the agent and manager.

    A sure way of knowing is by looking at the insertion time and detection time.  If those two times are more than a few seconds apart - there was a disruption in communication and the agent is sending the queued data.

    If you are receiving syslog from the routers/switches - are you seeing any interface down/up messages?  or route changing messages?