Hello,
I found a ton of eventtypes for the vmware agent module like AGENT_CONNECTED, AGENT_RECONNECTED, AGENT_SHUTDOWN, etc. I can't find one for AGENT_UNREACHABLE though. I'm hoping to trigger an alert through splunk based on that eventtype. I can't find it in any vmware documentation and can't seem to find anyone asking the question. I can't be the only one 😄
Is there an AGENT_UNREACHABLE eventtype or is there even a different way I can extract that piece from another event?
Example:
index=* Module=Agent AGENT_CONNECTED
index=* Module=Agent AGENT_UNREACHABLE
