What is the impact if there is communication or network issues between Change Auditor services?
What will be the impact if there is no connection between Coordinator Server, Agent, Database server and Domain controller?
What is the impact if each of the coordinator, database, agents, and DCs cannot communicate due to network failure?
If the Coordinator looses connection to the database, it will signal the agents to hold the events they capture. The Agents will continue to audit events and store them locally until the coordinator signals to start sending events again, or their local cache file gets full, which ever comes first. The agents will also continue to audit events and store them locally if they loose connection to the coordinator. The size of the local cache for each agent is 3GB and this value cannot be changed
In the situation of Network failure is there any performance impact?
The Agent cache file will grow to a maximum of 3GB. There should't be any additional load on CPU or RAM above and beyond the normal load that the Agent uses
How many events can be cached locally?
The 3GB local cache equates to a few hundred thousand events. On a busy file server, it could take hours or days for the local agent cache to be exhausted, whereas on a DC it could be weeks to months.