Security Compliance

SEM not showing complete information of events

This article provides brief information and steps to resolve the issue when when an event comes into SEM but does not give useful information about the event.

First published date

10/12/2018 4:34 PM

Last published date

3/28/2019 4:17 PM

Overview

This article provides brief information and  steps to resolve the issue when when an event comes into Security Event Manager (formerly Log & Event Manager) but does not give useful information about the event.

Product section

Security Event Manager

Cause

Vendors change event descriptions all the time and we just have to update the SEM connector that reads that event in order to pick up the new description of the event details.

Resolution

Create a new case with support either on the web, or call and provide the following:
 

  • Screenshots of what is in SEM and what is showing on the vendor side, such as Microsoft events.
  • RAW logs - meaning that the format of the event is unchanged, like with Microsoft EVTX format or syslog data.

We then will have our developers update the connector to reflect the changes from the new event details.