The Agent & sensor status shows Unknown in the Visualizer Table View
|Article:TECH163967|||||Created: 2011-07-05|||||Updated: 2012-02-09|||||Article URL http://www.symantec.com/docs/TECH163967|
The Agent and sensor status is Unknown in the visualizer table view.
Computer properties show that the Agent & sensor services were OK and that events were coming into the SSIM appliance.
Status shown in the visualizer table view is "Unknown".
The SSIM has NTP enabled, no time discrepancies seen.
Verify or change Agent logging settings through the SSIM client:
- Under the Agent Configurations > logging, verify the Agent Queue Statistics Report Interval number is not set below 30 seconds. The default setting is 300.
- Under Rules > Monitors, verify the System State Monitor is enabled and configured.
After making any changes or if no problems were found, restart the simserver & statsvc services.
Article URL http://www.symantec.com/docs/TECH163967