Skip to main content
Skip table of contents

EVID 18900 : McAfee ePO Policy Auditor Messages

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

EVID 18900 : McAfee ePO Policy Auditor Messages

Base Rule

General Information Log Message

Information

Mapping with LogRhythm Schema

Device Key in Log MessageLogRhythm SchemaData TypeSchema Description
AgentGUIDN/AN/AUnique identifier of the agent that forwarded the event.
MachineName<dname>Text/StringName of the system hosting the detecting product.
RawMACAddress<dmac>Text/StringMAC address of the system hosting the detecting product.
IPAddress<dip>IP AddressIP address of the system hosting the detecting product (if given in the event).
AgentVersionN/AN/AN/A
OSNameN/AN/AN/A
TimeZoneBiasN/AN/AN/A
UserName<domainimpacted>
<account>
Text/StringN/A
ProductName<vendorinfo>Text/StringName of the detecting managed product.
ProductVersion<version>Text/String/NumberVersion number of the detecting product.
ProductFamilyN/AN/AN/A
EngineVersionN/AN/AVersion number of the detecting product’s engine (if given in the event).
EventID<vmid>NumberUnique identifier of the event class.
Severity<severity>Text/String/NumberN/A
GMTTimeN/AN/AN/A
ProductNameN/AN/AName of the detecting managed product.
ProductVersionN/AN/AVersion number of the detecting product.
ProductFamilyN/AN/AN/A
EngineVersionN/AN/AVersion number of the detecting product’s engine (if given in the event).
AuditIDN/AN/AN/A
Result<result>Text/String/NumberN/A
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.