04-09-2007 10:09 AM - edited 03-09-2019 05:46 PM
Anyone experienced this?
I've unattached a rule from an active module/policy for the group that all hosts belong to, and it's still generating alerts with the 'Rule XXX - No longer enforced on ClientX'. It's been happening for over a week...
Also disabled the rule entirely and it's still generating alerts...
I've reset the agents, etc.
04-09-2007 01:11 PM
Have you verified that the agents in question have downloaded the new policies?
04-09-2007 07:05 PM
From the standpoint of checking polling times, lowering polling times down to 1 minute, etc...
Yes.
This cloned rule in question is the only rule that has been modified in the policy.
04-12-2007 06:55 AM
How about download times? When you make a change to the policy you should see the agent actually record when it downloaded the last change on the agent GUI.
Alternatively, you should be able to create a new agent kit without that rule/policy and apply it to the host.
04-12-2007 09:27 AM
You might have another rule stepping on this one. That's been my experience with this behavior
Try disabling the original rule and/or detach one of the hosts from all groups except
Is it all hosts or just some? When clients can't poll fast enough they will enforce old rules but that should only be temporary.
04-12-2007 10:20 AM
I've disabled the original rule, and am still getting alerts on the original, but with the 'rule xxx no longer enforced on clientxxx'.
I've detached all of the hosts from the original group, added them to the custom group, and All Windows. That's it.
I'm working on the issue again this afternoon, and will post updates...
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: