Getting below alerts from Mcafree AntiVirus on ITCM Domain Managers:
May 5 14:17:44 CEF:0|McAfee|Database Security|4.8.4|alert|Monitor Table deletion|9|externalId=63591428000 rt=1651740458667 cs1=<hostname> cs1Label=DBMS dst=<ip_address> src=<ip_address> duser=ca_itrm suser= shost=<hostname> dproc=CA IT Client Manage act=DROP TABLE cs2=drop table health_mdb_chk_tmp cs2Label=SqlStatement cs3=health_mdb_chk_tmp cs3Label=AccessedObjects
Though there is no impact of the product functionality. Would like to know what are these messages?
CA Client Automation - All Versions.
It is the AM component performing checks. If you look in “dsm\logs\health_*.log” you will see this running daily.