Hi,
I have installed SAM 5.5. I have a strange problem. I have a component, which is a 'Windows Event Log Monitor'. This is applied on the Domain Controllers. The name of the component is Logon Failure: Unknown user name or password. The problem is that this component often changes its state. The status is showing as DOWN. Why does this show DOWN or what is the relevance when an Event Log Monitor component goes Down? As per my knowledge, how it works is it will check the number of occurrences with a particular Event ID and reports it. If the number of Occurrences is more than the threshold, it would change its status to Warning or Critical. When does it go DOWN? Does this mean that the SAM is not polling for that component? Please advice.
I have attached a couple of screenshots.