The ChangeAuditor Coordinator is receiving new EMC events from a Change Auditor agent configured for EMC Isilon, but the events appear to be delayed or missing when viewed in Change Auditor Client.
This is often caused by enabling auditing on the Isilon device for an extended period of time before the Change Auditor agent is actually up and running. The events/logs are kept in the audit folder on the device indefinitely, and when the EMC agent comes up to accept events, they are submitted by the device chronologically, oldest to newest.
Engage the EMC Administrator or EMC Support to determine why there is a delay in the Isilon or CEE server sending events to the Change Auditor Agent.
The old audit events need to be backed up and purged by disabling auditing in the EMC web GUI, going through the process of DELL EMC Article 335488, then re-enabling auditing.
After this process is performed, new events should be submitted to the Change Auditor agent.
