Are events lost when an agent looses connectivity to the coordinator?
説明
If an agent cannot connect to a coordinator, are the events that occur during that time lost?
対策
Agent's data collection considerations:
The initial size of the local agent database is around 3-4 MB and has a maximum size limit of 3GB. This size limit is hardcoded and cannot be changed. In addition, this local database is not designed to be queried or searched manually.
Data collected by the Agents are typically held in an in-memory queue on the agent as is it generally not stored for very long and sent to the coordinator in real-time.
When the agents cannot communicate to a coordinator, and the in-memory queue is filled, the data is flushed from memory into the agent DB or local cache.
The agent will continue to collect events from the server they are installed on and store them in the local agent database. Once the agent is able to connect to a coordinator, it will forward all of the stored events it has collected which in turn will be forwarded to the Change Auditor Database provided the SQL server is available.