From 29980ea95827a316e360031315594fd9ce3144b7 Mon Sep 17 00:00:00 2001
From: reyesj2 <94730068+reyesj2@users.noreply.github.com>
Date: Tue, 9 Sep 2025 15:39:55 -0500
Subject: [PATCH] offline threshold check

---
 salt/manager/tools/sbin_jinja/so-elastic-agent-monitor | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/salt/manager/tools/sbin_jinja/so-elastic-agent-monitor b/salt/manager/tools/sbin_jinja/so-elastic-agent-monitor
index 0b40925fd..3fa3221c2 100644
--- a/salt/manager/tools/sbin_jinja/so-elastic-agent-monitor
+++ b/salt/manager/tools/sbin_jinja/so-elastic-agent-monitor
@@ -145,6 +145,11 @@ main() {
 
                 offline_hours=$(calculate_offline_hours "$last_checkin")
 
+                if [ "$offline_hours" -lt "$OFFLINE_THRESHOLD_HOURS" ]; then
+                    log_message "INFO" "${agent_hostname^^} has been offline for ${offline_hours}h (threshold: ${OFFLINE_THRESHOLD_HOURS}h). Not logging ${agent_status^^} agent until it reaches threshold"
+                    continue
+                fi
+
                 log_entry=$(echo 'null' | jq -c \
                     --arg ts "$current_timestamp" \
                     --arg id "$agent_id" \