We recently ran into an issue with one of our deployed ITM Windows OS agents. The problem was that the agent slowed down a few times a day. This means that sometimes it took minutes for the data to show up on TEP. When we checked the Windows OS Agent logs we found the following error repeating:
(54475515.0002-27BC:knt67agt.cpp,284,”TakeSample”) remoteFailureCount
(5447551A.0000-27BC:knt67agt.cpp,949,”ipToHostname”) gethostbyaddr error . Exiting
(5447551A.0001-27BC:knt67agt.cpp,283,”TakeSample”) ipToHostName failure for IP: 114.106.84.40
We then added the following parameters to the windows OS agent environment file which has solved the issue:
NT_LOG_THROTTLE=1
NT_PERFMON_MEMORY_CHECK=1
REVERSE_LOOKUP_ACCEPTED_FAILURES=10
Very likely the DNS resolution problems caused the agent to wait for the hostnames to be resolved therefore it was hanging until it got a timeout.