Old events are collected again and alerts have been sent

Versions / Builds Affected

2013

Status

Open

Problem Summary

client will have instances where old events get collected once again and new alerts will be sent.

TT / JIRAID

494

How to Identify

Client will receive an alert from an event with a old date From: GFI EventsManager [admin@domain.com] Sent: Tuesday, September 02, 2014 6:35 PM To: admin@domain.com Subject: [GFI EventsManager] - Unexpected system shutdowns - Critical - appsrv - 6008 The previous system shutdown at 4:09:37 PM on ?6/?15/?2014 was unexpected. To avoid receiving large quantities of emails, enable Thresholds. From the Event Processing Rules node, right click the rule, select Properties and click the Threshold tab. In most of the cases the date appears with a "?" added, but that is not a rule.

Workaround / Fix Details

none

Required Actions

collect full troubleshooting logs, Microsoft Wndows events of the server and escalate the case to PSG