Zurück
-
Titel
Are events lost when an agent looses connectivity to the coordinator? -
Beschreibung
If an agent cannot connect to a coordinator, are the events that occur during that time lost? -
Lösung
Agent's data collection considerations:
- The initial size of the local agent database is around 3-4 MB and has a maximum size limit of 3GB. This size limit is hardcoded and cannot be changed. In addition, this local database is not designed to be queried or searched manually.
- Data collected by the Agents are typically held in an in-memory queue on the agent as is it generally not stored for very long and sent to the coordinator in real-time.
- When the agents cannot communicate to a coordinator, and the in-memory queue is filled, the data is flushed from memory into the agent DB or local cache.
- The agent will continue to collect events from the server they are installed on and store them in the local agent database. Once the agent is able to connect to a coordinator, it will forward all of the stored events it has collected which in turn will be forwarded to the Change Auditor Database provided the SQL server is available.