How frequently are VSAU alerts sent to the SM consolidator? (NETIQKB46776)

  • 7746776
  • 02-Feb-2007
  • 10-Oct-2007


How frequently are VSAU alerts sent to the SM consolidator?

How often does the Security Manager Consolidator receive alerts from the VigilEnt Security Agent for Unix?

Are the VSAU alerts in the SM Consolidator considered real-time information?

VigilEnt Security Agent 4.x

VigilEnt Security Agent 5.x

Alerts are sent to the Security Manager consolidator by the VSAU immediately after they are generated and written to the ./vsau/local/spool*alerts file on the agent. The agents sends the alerts to SM, and the alerts will arrive in a few seconds or less, which is considered real-time data. The only exception to this timing would occur during an event storm in which case the agent spools up The alerts go through the spool file until everything is sent. You could see a delay of 30 seconds or more during a severe enough event storm.

Additional Information

Formerly known as NETIQKB46776