From the CA Client you can see that at some point some DCs stop sending AD audit events. Other events such as Registry or Services events are still captured. Restart the CA Agent on the DC resolves the issue but the issue appears to begin again after a few hours or days.
From the CA Client, the agent shows as active. Looking at the agent status on the DC it shows as running and connected.
You need to be signed in and under a current maintenance contract to view premium knowledge articles.