There are a number of Change Auditor events that are captured that relate to the status of the agent and agent connections:
- Change Auditor Agent connected
- Change Auditor Agent disconnected
- Change Auditor Agent lost heartbeat
- Change Auditor Agent started
- Change Auditor Agent stopped
- Change Auditor Agent restarted
An alert, or alerts, can be create to monitor when these events occur. To create an alert:
- Open the CA client
- Click the Searches tab
- Right click the folder where you want to store the new search/alert and select New Search
- Select the What tab of the new search
- Click the down arrow next to Add and select Event Class
- Under the Event Class column, click and type change auditor agent
- Select the agent events you want to have alerts for and click Add
- Click OK once you have added all the events you want to use
- Select the Alert tab
- Click SMTP
- In the To field, enter the email address(es) (or click the ellipsis) where you want the alerts sent
- Click OK
- Click Alert Enabled