Most of my clients seem to be sending reports every 15 minutes or so (according to client log files). I haven’t been able to figure out what is causing them to send new reports.
I tried intercepting the upload file from the relay filldb directory, but it’s encrypted and I can’t tell what it’s sending.
I also enabled debug logging on one of my clients and set it to 10000, but even after restarting the Client service I’m not getting detail on what it’s reporting.
I looking for suggestions on how to determine why my client are reporting so frequently.
There could be many different things that the agent is reporting. The first thing I would think would be the analysis properties. There are many that update “every report” and various other intervals. Also new fixlets that come in for patches would be getting evaluated and possibly new baselines.
I understand the points you brought up. I have gone through my analysis, baselines and properties already, most of our stuff is set to evaulate every 6 hours or 1 day. I checked open actions as well and didn’t find anything out of the ordinary (only 7 open actions). I don’t think it’s new patches because this is consistanly happening at least every 15 minutes, often more frequently.
I was hoping there was a method to find exactly what results are actually being posting in there reports.
Maybe try the fixlet “BES Client Setting: Enable Debug Logging”. This provides really detailed information on exactly what is going on. It might detail what is being sent.
Also remember that there are also the managed properties which are evaluated quite often.