I noticed that the same devices keep on displaying Rebooted events every poll cycle.
These devices have not been rebooted.
Event Type = reconfiguration
Event SubType = rebooted
Description = A device reboot was detected during this poll period. The device last restarted x:xx:xx.xx ago.
The Availability Metric Family polls for sysuptime and expects the values to be in time ticks.
If the difference between the previousSysUpTime and the currentSysUpTime is not equal to the timeTicksSincePreviousPoll we will generate a reboot event.
Enable detailed poll logging for the problem device and wait at least 1 poll cycle or until the event occurs then collect all logs for this IP.
Check for this message:
date: The device rebooted, but we are not dropping the response because this is the Availability poll response: previousSysUpTime=42537758, currentSysUpTime=42538058, timeTicksSincePreviousPoll=30000, response=SnmpPollResponse [itemID=454340, deviceItemId=454340, internetAddress=x.x.x.x, pollGroupId=4090, cycleTimestamp=1550763000000
readTimestamp=1550763229444, duration=300000, pollRate=-1, error=SUCCESS, errorIndex=-1, rowData=[
SnmpResponseVariable [oid=22.214.171.124.126.96.36.199.0, type=TIME_TICKS, value=42538058, isDelta=true, isList=false, error=SUCCESS, isDynamicIndex=false, indexList=null]
actual difference = 300
CAPC 3.x on linux
Device is reporting the wrong value for sysuptime.
There are 2 options: