Hi!
I have the following situation:
In the ossec there are 7 out of 30 agents that appear as "disconnected", however, when I check the status of the agents with the command /var/ossec/bin/agent-control satus these appear with the service running.
agent disconnect
Re: agent disconnect
Does the ossec.log show any prominent errors in regards to the affected agents?