The Agent & sensor status shows Unknown in the Visualizer Table View

Article:TECH163967  |  Created: 2011-07-05  |  Updated: 2012-02-09  |  Article URL http://www.symantec.com/docs/TECH163967
Article Type
Technical Solution


Issue



The Agent and sensor status is Unknown in the visualizer table view.

Computer properties show that the Agent & sensor services were OK and that events were coming into the SSIM appliance.

 


Error



Status shown in the visualizer table view is "Unknown".


Environment



SSIM 4.7.2

The SSIM has NTP enabled, no time discrepancies seen.


Solution



Verify or change Agent logging settings through the SSIM client:

  • Under the Agent Configurations > logging, verify the Agent Queue Statistics Report Interval number is not set below 30 seconds.  The default setting is 300.
  • Under Rules > Monitors, verify the System State Monitor is enabled and configured.

 After making any changes or if no problems were found, restart the simserver & statsvc services.


 

 




Article URL http://www.symantec.com/docs/TECH163967


Terms of use for this information are found in Legal Notices