Overview
This article provides information regarding the slow or intermittent collection of events.
Environment
- All supported environments
- GFI EventsManager (all versions)
Root Cause
The slow or older machine is being used in the environment.
Information
GFI EventsManager does not add the machine to the queue if the previous scan is not yet completed. The reason is to avoid cases when scanning takes too long for machines that are scheduled to be scanned more frequently than others.
For example, if GFI EventsManager collection is set to every two hours and the collection is taking a long time, the second collection does not need to be added to the active queue two hours later as it is already running. It is not possible to estimate how much a scanning should take. It depends on various factors such as processing power, number of events and number of events source to collect.