UDP is a stateless protocol and, therefore, it has no status in a strict sense. Nevertheless, to keep them similar to TCP connections, UDP connections also include a status field.
Because of the very nature of the UDP protocol, the status of a UDP connection does not indicate success or failure in the delivery. However, the system can deduce whether the connection is still ongoing or if it has expired. Thus, the two possible statuses of a UDP connection are:
While events are being aggregated to the same connection (increasing its cardinality), the system considers that the connection is still open. It means the device continues sending datagrams to the same destination via the same UDP port.
When the aggregation time has passed and there are no new events to add to the connection, the system considers the UDP connection closed.
The aggregation time depends on your settings for aggregating events (minimum 5 minutes). Choose among 4 aggregation strategies for an optimal trade-off between detailed event information and history length. Contact Nexthink Support for more information.