I'm looking to monitor a remote server on the end of a VPN connection, the connection may or may not be available 24 hrs.
In the event that the connection drops, from what I can see, the event log collection will stop, and when the connection comes back up, it will start collection data from the time the connection came back.
As far as I can see, Analyzer reads the events in real time, as they go into the remote log, and tucks them away in it's local store
How do I make it collect the missing information? I can see no way to force Analyzer to read the whole log, and I am currently ( for various reasons ) unable save the log out and import it.
I did read this thread - https://forums.manageengine.com/#Topic/49000003920046 - which seemed to indicate that this should be possible in the newer versions. "We are working on automation in these kind of scenarios when EventLog Analyzer is down "
This seemed to indicate that as of the middle of last year, there would be a facility to collect missing data automatically - was this ever implemented? If so, how do I set it up?
If not, am I going to have to approach this from a different angle, and have archived logs sent to me for analysis and forgo the realtime analysis and alerts?