Hello,

I'm auditing some windows 2003 fileservers using snare agent and I
watching the difference between event time and observer event time i've
noticed that events are arriving really late to sentinel (3 days late).
Any thoughts on this?

Thanks in Advance


--
mmarchese
------------------------------------------------------------------------
mmarchese's Profile: https://forums.netiq.com/member.php?userid=1311
View this thread: https://forums.netiq.com/showthread.php?t=52619