Intel Security SNS ProTip for ePO: Event parser stops parsing events until service is restarted for ePO 4.6.x

Version 1

    Occasionally, the ePO 4.6.x Event Parser service stops parsing events until the service is restared. This happens  shortly after an exception occurs and is a known issue that has been observed with ePO 4.6.x. You will see “memory could not be Read” in the event parser log. To resove this issue, Intel Security recommends upgrading to ePO 5.1.x.


    For more information regarding this issue, please refer to KB84432 (


    For more resources, visit the ServicePortal and search for related content. Also, visit the McAfee ePO Community (


      Intel Security SNS ProTips help you maximize your protection with troubleshooting, best practices, how-to tips, and links to Knowledge Center resources. To unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center.