Error: Activity Monitoring engine offline | Trend Micro Service Central

For an overview of the Activity Monitoring module, see About Anti-Malware.

To troubleshoot this error:

In the Workload Security console, look for other errors on the same machine. If errors exist, other issues could cause your Activity Monitoring engine to be offline, such as communications or agent installation failure.
Check communications from the agent to the Workload Security Relay and Workload Security.
In the Workload Security console, view the details for the agent with the issue.
- Verify that the policy or setting for Activity Monitoring is enabled.
Deactivate and uninstall the agent before reinstalling and reactivating it.

For more information, see Uninstall the Server & Workload Protection Agent and Activate the agent.
In the Workload Security console, go to Updates for that computer.
1. Verify that the Security Updates are present and current.
2. If not, click Download Security Updates.

Troubleshoot the Agent on Windows

To troubleshoot the Workload Security Agent on Windows:

Make sure the following services are running:
- Trend Micro Workload Security Agent
- Trend Micro Solution Platform
Check that all the Anti-Malware related drivers are running properly by executing the following command: # sc query AMSP
- If a driver is not running, restart the Trend Micro services.
- If the driver is still not running, perform the following steps:
  1. Verify the installation method. Only install the MSI, not the ZIP file.
  2. Manually remove and reinstall the Agent. See Manually uninstalling Workload Security Agent, Relay, and Notifier from Windows.

To troubleshoot the Workload Security Agent on Linux:

Verify that the agent is running using the following command in the command line: service ds_agent status
If you are using a Linux server, your kernel might not be supported. For more information, see Error: Module installation failed (Linux).
- When a Linux kernel is not supported, the Anti-Malware engine may remain partially functional and show a Warning rather than an Error. For details, see Warning: Activity Monitoring engine has only basic functions.