Occasionally, the ePO 4.6.x Event Parser service stops parsing events until the service is restared. This happens shortly after an exception occurs and is a known issue that has been observed with ePO 4.6.x. You will see “memory could not be Read” in the event parser log. To resove this issue, Intel Security recommends upgrading to ePO 5.1.x.
For more information regarding this issue, please refer to KB84432 (https://kc.mcafee.com/corporate/index?page=content&id=KB84432).
For more resources, visit the ServicePortal and search for related content. Also, visit the McAfee ePO Community (https://community.mcafee.com/community/business/epo).
Intel Security SNS ProTips help you maximize your protection with troubleshooting, best practices, how-to tips, and links to Knowledge Center resources. To unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center.