Refer to the exhibit. What are three possible reasons why the Agent Status displays Running Inactive? (Choose three.)

Question

Exhibit

Options

• AThe agent was registered incorrectly
• BThe collector was not assigned to the agent
• CThe agent is temporarily down
• DThe template was not assigned
• EThe template was removed

• A
  75% (27)
• B
  17% (6)
• E
  8% (3)

Explanation

In FortiSIEM, an agent's status of "Running Inactive" indicates that the agent is installed and running but not actively sending data or has encountered a misconfiguration. The following reasons can cause this status: 1. The agent was registered incorrectly If an agent was not registered properly, it might not establish a proper connection with the FortiSIEM system, resulting in an inactive status. 2. The agent is temporarily down If the agent goes offline (e.g., due to system shutdown, network issues, or agent crash), it will show as inactive. 3. The template was not assigned Agents require a template to function correctly. If no template is assigned, the agent cannot collect or process events, leading to an inactive state.

No community discussion yet for this question.