Security Compliance
Event Summary and Database Maintenance reports have different event totals in SEM
This article describes why there are cases where the values in the Event Summary and Database Maintenance reports have different event totals.
First published date
10/9/2018 4:51 PM
Last published date
10/9/2018 4:51 PM
Overview
This article applies to Security Event Manager (formerly Log & Event Manager).
This article describes why there are cases where the values in the Event Summary and Database Maintenance reports have different event totals.
This article describes why there are cases where the values in the Event Summary and Database Maintenance reports have different event totals.
Product section
Security Event Manager
Resolution
Apart from Audit Alert, Security Alert and Internal Alert, there are many other event types that are not captured in Event Summary reports. Since Event Summary reports do not capture certain events, event counts don't equal the Database Maintenance reports.
When reviewing the Event Summary reports, the columns of Authorization Audit, Machine Audit, Policy Audit, Resource Audit, Generic Audit are all audit events and are combined and counted in the column as "Audit Alert".
The values for the totals in the Database Maintenance report can be verified by performing an nDepth search.