Endpoint Security events don't display in the Threat Event Log

Technical Articles ID: KB88975
Last Modified: 2023-07-06 10:29:23 Etc/GMT

Environment

Endpoint Security (ENS) Threat Prevention 10.x

Problem

Only ENS events don't display in the ePolicy Orchestrator (ePO) Threat Event Log. Events for other products display properly. XML isn't generated for ENS events on local systems under Programdata/McAfee/Agent/Upload. XML is generated for events for other products.

NOTE: If there are issues with the events for other products too, check the following:

The ePO database size is normal.
The ENS, McAfee Validation Trusted Protection, and ePO services are running.
There isn't an ePO outage.
Agent-to-server communication is successful.

Cause

The ENS Common policy option Send events to McAfee ePO is disabled. If you enable this option, all events logged to the Event Log on the ENS client are sent to ePO.

Solution

Enable the option Send events to McAfee ePO:

Log on to the ePO console.
Click Menu, Policy, Policy Catalog.
Select Endpoint Security Common from the Product drop-down list.
Click the policy name.
Click Show Advanced.
Select Send events to McAfee ePO.
Click Save.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Endpoint Security events don't display in the Threat Event Log

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Endpoint Security events don't display in the Threat Event Log

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title