CEF Audit through event forwarder terminal fields is missing
search cancel

CEF Audit through event forwarder terminal fields is missing

book

Article ID: 278762

calendar_today

Updated On:

Products

CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction


Most of the fields on the CEF format message can be sent by event forwarder, but not the Terminal field.

Environment

PAMSC 14.1 cp05

Cause

When the connection is done via ssh, and seos is restarted after the connection, the terminal information is lost

 

Resolution

This will be fixed in PAMSC 14.1 cp06

or ask support for a hotfix to install over cp05