ITM Windows OS Agent slows down periodically

We recently ran into an issue with one of our deployed ITM Windows OS agents. The problem was that the agent slowed down a few times a day. This means that sometimes it took minutes for the data to show up on TEP. When we checked the Windows OS Agent logs we found the following error repeating:

(54475515.0002-27BC:knt67agt.cpp,284,”TakeSample”) remoteFailureCount
(5447551A.0000-27BC:knt67agt.cpp,949,”ipToHostname”) gethostbyaddr error . Exiting
(5447551A.0001-27BC:knt67agt.cpp,283,”TakeSample”) ipToHostName failure for IP: 114.106.84.40

We then added the following parameters to the windows OS agent environment file which has solved the issue:

NT_LOG_THROTTLE=1
NT_PERFMON_MEMORY_CHECK=1
REVERSE_LOOKUP_ACCEPTED_FAILURES=10

Very likely the DNS resolution problems caused the agent to wait for the hostnames to be resolved therefore it was hanging until it got a timeout.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.