ePolicy Orchestrator MER tool doesn’t run locally if event IDs 18500–18505 are filtered
Last Modified: 2022-03-03 09:20:03 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
ePolicy Orchestrator MER tool doesn’t run locally if event IDs 18500–18505 are filtered
Technical Articles ID:
KB70557
Last Modified: 2022-03-03 09:20:03 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10.x Minimum Escalation Requirement (MER) tool 3.x, 2.x For environment information, see KB69396 - Supported platforms for WebMER (Web Minimum Escalation Requirements tool) / ePO-MER. ProblemThe ePO MER tool does not run locally or runs only once.
The line :/silent /save "C:\WINDOWS\TEMP\MDS2005_{0AF4CA31-7507-4C21-BDAF-08282AD8A20B}.tgz" /detected Failed to generate the event. I #6476 Manage Running task SoftwareID:SUPPCLNT1000, TaskID:195 X #6476 Manage Running task failed, result=-1000 Cause
When event filtering on the ePO server is enabled for the listed event IDs, the ePO MER tool can't create events.
Solution
This issue is resolved in ePO MER tool 4.0. Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.
NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products. Workaround
Select the events to filter manually by performing the steps below:
Affected ProductsLanguages:This article is available in the following languages: |
|