Network
4sources
30reasons
0conditions
12decode tables
A network adapter, link or remote-access path failed or degraded.
How the agent recognises this on a host
- The host reports network adapter and link state through the operating system channels.
The sources below carry those markers.
| Source | What it is | Status |
|---|---|---|
| Windows System event log | The System channel: service, driver, disk, network, cluster and hardware faults from the operating system itself. | Live |
| Windows network event channels | Connectivity, DHCP, DNS, WLAN, firewall, SMB, RDP, and related channels. Failures, posture facts, and lifecycle records are read from the provider payload. | Live |
What is scored here
| Source | Signals | What they are |
|---|---|---|
| Windows Application event log | 5 | aspnet compilation failed, aspnet unhandled exception, remote assist session started, vpn dial failed, wcf request failed |
| Windows network event channels | 10 | dhcp address conflict detected, dhcp lease denied, dhcp lease failed, dns client resolution timed out, firewall rule changed, firewall rule created, firewall rule deleted, wfp transaction watchdog timeout, wlan connect failed, wlan security handshake failed |
| Windows Security event log | 4 | firewall rule changed, firewall rule created, firewall rule deleted, firewall service stopped |
| Windows System event log | 11 | ephemeral port alloc failed, iis apppool disabled, iis apppool identity invalid, iis apppool worker start failed, iis worker crash, nic driver fault reported, nic driver load failed, nic link down, smb server transport bind failed, vpn connected, wlan limited connectivity |