This may occur when the agent itself cannot find the table information from the local database used by Log Inspection, resulting to "Get Events" failed warning (absent log inspection events) from the agent status. This happens when the local database becomes corrupted.
To resolve the issue:
- Stop the Deep Security Agent service.
- Reset the agent, and then delete all Log Inspection components.
- Restart and activate the agent. Everything should be restored including the local Log Inspection database file (lca.db).
- Check if the events are being delivered to the Deep Security Manager to confirm if the local Log Inspection database is working fine.