I created a small program to dump reports in files and log file as they arrive in the Report Server. Project: https://github.com/undislab/UndisReportCollector (a new release is finally coming !). It’s really usefull to easilly create reports and Dashboard in Splunk
Since a few days, I noticed that some hosts send the same several reports (ie, with the same JobId) to the report server every 10 minutes. They send approx. 8 times more reports than other servers.
I had an outage on the report server 2 weeks ago and some hosts where unable to send their reports. Maybe it’s the origin of the problem … I plan to reset the LCM config (and ConfigurationStatus folder) on these hosts.
Have you ever encountered this problem ?