SNS ProTip for SIEM:  'Invalid var last token' error when rolling out SIEM policy

Version 1

    To help you maximize your SIEM deployment, McAfee SNS ProTips deliver troubleshooting, best practices and how-to tips with links to in-depth KnowledgeBase resources.

    When you are trying to roll out a policy on your SIEM Enterprise Security Manager (ESM) device, you see the following error message: 

    Error: Could not execute command on device" (NotOk , invalid var - last token:  ;  @ [349:436] to [349:436], not found:  Bytes_from_Server.Bytes_from_Server , invalid var - last token:  ;  @ [348:755] to [348:755], not found:  Bytes_from_Server.Bytes_from_Server 

    This error occurs because of a synchronization issue between the Receiver and the ESM. For details on how to resolve the issue, refer to KB82166 - 'Invalid var last token' error when rolling out SIEM policy.

    For more resources, visit the McAfee KnowledgeBase and search for SIEM-related KBs and visit the McAfee SIEM Community: https://community.mcafee.com/community/business/siem.