Notifications
Clear all
Topic starter
16/07/2026 11:41 am
I've been setting up Sentinel for my team and noticed something strange. On most of our Windows servers, the SecurityEvent table logs are fine. But for a few specific ones, we're seeing gaps of several hours at a time, even though the Windows Event Logs on the servers themselves seem complete.
Has anyone else run into this? I'm using the AMA connector and the logs are critical for our compliance reporting. I've checked the agent health and it shows as connected. Wondering if there's a known issue with certain Windows Server versions or configurations.