Add ability to view health of Collection Hosts and/or Agents in Statistics
If a collection device stop reporting there is no immediate method of notification unless you constantly monitor the Average input rate of events and notice that it has dropped. I did not see any ability to query the status of collection/agent devices to determine if all of the assets are reporting to the SSIM.
I think it would be very advantageous to add functionality in the Statistics page in the form of a table or tab that just shows every collector that is reporting events with the second column showing the last date/time an event came in from that sensor. This wouldn't require an inventory because the list would generate based on new collector names being recognized when they send an event.
Going a step further, this list could then be used to allow the user to set thresholds for specific collector devices and enable the SSIM client to react in the form of a pop-up if a collector reaches a threshold for non-reporting.
Simple Example:
Collection Device Last Reported Event
fdjkids01.url.com 2011-10-05 03:25:12
fdjkids02.url.com 2011-10-05 02:10:08

Comments
We do have some ability
There are a couple of rules -Potential Agent Malfunction and Potential Sensor Malfunction, which will trigger whenever there is a health problem with an agent or sensor.
Unfortunately we are using
Unfortunately we are using 4.64 and do not have those rules at our disposal, nor do we have the X NOT followed by Y template. Perhaps when an upgrade is undertaken, but until then we are without a method.
Would you like to reply?
Login or Register to post your comment.