Several audit messages about "Serial" is the management MAC address and not the serial number of the appliance being sent by email

Products

• Security Analytics

Issue/Introduction

Several of these messages are being reported by Security Analytics.  

IP Address: ##.##.##.##
Serial: ##:##:##:##:##:##
Time: 2025-06-25 21:50:03+00:00
Event: AUDIT
Message: logmsg="controller.extractor::message.cleanup", time="21:50:03", day="06/25/2025"
Note: "Serial" is the management MAC address and not the serial number of the appliance

Resolution

These messages are informational only and can be ignored.  If you see these messages being sent via email, you can modify the email notification settings by going to Settings > Communication > Advanced and removing the check marks by the events you don't want to see via email.