ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
Intrusion Detection events from a Solaris agent does not contain the User Name
Article ID: 161798
Data Center Security Server
Data Center Security Server Advanced
With an Intrusion Detection policy deployed to a Solaris agent, when a watched file is accessed or modified, the User Name is not in the Event Details.
At this time Real Time File Integrity Monitoring (RT-FIM) is not supported on Solaris.
The IDS Filewatch module on Solaris is functioning as designed.