Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Cleaning up LEM Internal Events

$
0
0

Hello,

 

I'm currently running SEM 6.7.1, and under the LEM Internal Events tab I'm receiving about 1000 events a minute. All the events are pretty much the same and have the same basic layout as follows:

 

NAME: InternalWarning

 

EVENT INFO: 2:The system cannot find the file specified.

 

DETECTION IP: Mostly user computers, but the occasional server as well.

 

Under the details we get some slight variation, but they all seem to be windows based:

 

ToolAlias: Windows System -or- Vista Security -or- Windows Application

 

ProviderSID: FastCenter normal error

 

Component: Windows System -or- Vista Security -or- Windows Application

 

 

This seems to be a pretty useless log that's just cluttering everything else up. I was wondering if anyone knew how to get rid of it or if I'm wrong and this log is actually very useful and the fact that I'm receiving so many indicates an issue in my environment.

 

Thanks,

 

Jared


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>