This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Register Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions

NetWitness Endpoint - Windows Event log when offline

Anonymous
Not applicable

‎2020-05-12 02:43 AM

When a NetWitness Endpoint agent is off network or cannot talk to the Endpoint Server, does it still attempt to send Windows Event logs via syslog or does it wait to talk to the server before starting to send logs again.

Labels:
0 Likes
1 REPLY 1

Anonymous
Not applicable

‎2020-05-12 09:26 AM

Hi Jeremy,

 

The NetWitness Endpoint Agent will attempt to reconnect, by default, every 30 seconds if there are logs to be sent.  Once it has a policy to send logs it does not need to reconnect to the Endpoint Server in order to send those logs.

 

Thanks,

Guy

0 Likes
© 2022 RSA Security LLC or its affiliates. All rights reserved.