CSA Events to Database or MC when using remote SQL DB
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-27-2008 09:21 AM - edited 03-09-2019 09:44 PM
Anybody know how the agents (ver 6) send thier evernts - do they send the events to the MC and then the MC sends on to the SQL database, or does the agent send directly to the SQL database?
My server that hosts the MC BSOD'd last Friay after applying the KB958644 out-of-cycle update. I left the MC off over the weekend. Today I restored the MC to my Thursday nigh backup image. When it restarted it shows events that happend over the weekend.
Just was wondering how thise events got there.
Thanks
Lar
- Labels:
-
Other Security Topics
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-28-2008 11:04 AM
Hosts upload events to the MC.
If the host can't connect to the MC, it will upload events the next time it connects.
Tom
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-28-2008 11:47 AM
Thank you, Tom. Appreciate the answer.
Kinda though it was that way but wanted to be sure.
Larry
