The Symantec Critical System Protection (SCSP) management console shoes a “last contact of today” and “last event of today,” but shows the agents offline.
A red circle icon appears in the management console GUI and the agent is not reporting events to the management server.
By default, the red circle icon is based on how many times the agent has missed their polling cycle. By default the polling cycle is 5 min and the red circle icon is configured to appear when an agent has missed 5 or more polling cycles. Essentially, if the agent has not talked for 25 min then the icon will turn red. So yes, you can have a last contact time of today and last event time of today and still be red. This will usually happen when agents have been offline for days and have a large backup of events.
We recommend allowing the systems continue as is, when the backlogged events are done processing (may take a few days) then the agents should all start coming back as green. Also, the green, yellow and red circle icons are configurable and can be set to check the last event time instead of the last contact time. It can also be configured to a different number of polling cycles, so you could set the indicator to one day and the icon would not turn red until the agent has not communicated for 24 hours.
Environment: • SCSP 220.127.116.11 • SCSP 18.104.22.168 • Windows(R) Server 2003 Standard x64 Edition • Total Physical Memory: 2,047 MB • Failover enabled
Imported Document ID: TECH168947
Subscribing will provide email updates when this Article is updated. Login is required.