Remote agent zone population only works on aggregated events?
I have created a destination zone mapping using /user/agent/map/map.0.properties as my agent cant register with ESM.
Zones are only populated when an event has > 1 in aggregated event count.
Has anyone come across this before?
currently I am working on one similar issue and for curiosity if you can disclose below information, but I would advise to create Service Request as it will need more detailed info that is not for forum.
1) Did you upgrade anything in your environment (upgrade of SmartConnector / ESM, what was previous version) ?
2) Did you change configuration for zones recently ?
3) Is the issue specific for 1 SmartConnector or it affects more SmartConnectors (are they same type and framework version, for example Syslog / 7.7.0) ?
4) Did this ever work properly ?
5) What is the SmartConnector / ESM version ?