This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ObserveEventTime delay

Hi All

     Customer response the Windows Server log Which use Agent Manager collect log delay.

     I checked the events sent from the host and found that the Windows log sent from the host is sent to the Universal Collector and Windows Collector via the Agent Manager Connector

     For events sent to Universal Collector, the ObserverEventTime is normal; but for events sent to Windows Collector at the same time, ObserverEventTime records the previous time (indicating that these events are events several hours ago). These delayed events are more than 12 hours at most, and at least four hours (when I observed him more than six hours later, the last event was four hours ago)

     I have confirmed the timezone, it is not the delay caused by the timezone

     I don't know why the events sent by the same host, but different Collectors have such problems.

Is it an EPS problem??
Does anyone have relevant experience to offer?

Thanks!!

Wencheng

Tags: