cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
388
Views
0
Helpful
1
Replies

CSA alerts

followurself
Level 1
Level 1

CSA alerts-wht type of alerts are sent to the MC.could see lotsof alert generated on the local log file where csa alerts are seen but alerts seen on the server are very less. the security setting set is medium

The polling of csa agent doesnt seem to be accurate. the polling interval is set to 10 mins. it seems working but many times have observed that it doesnt poll, we ave to force the poll. csa agent version is 4.5 616

1 Reply 1

472189
Level 1
Level 1

Are you in protect mode or test mode? You can set any event to log to if you so choose. If you have polling set to 10 mins and the MC or DB is busy, the poll will fail. depending on your deployment size, I would recommend a polling interval of 2 hours min and use the polling hint on a group if you have a policy change you need to release ASAP..