Why is the Server Status in the agent reported as OFFLINE when TCP is set?

Owned by Carlos Osorio
Nov 09, 2020
1 min read


SUMMARY

Aug 21, 2015

TCP does a three way hand shake to establish the connection, if the destination SIEM is not there or does not have TCP enabled on the port you are sending to, then OFFLINE will be displayed.

Check that if you are going through a firewall, if a firewall rule may be blocking you.