How to I make sure my events register source and destination IP address and MAC address as well as user?
I've been trying to track some events on my network using McAfee ESM 9.4, but many of the events don't show IP address or MAC addresses. I've been trying to figure out a way to configure ESM to show them but haven't been successful. Anybody experienced similar or same problem? Anybody knows a solution?
Re: How to I make sure my events register source and destination IP address and MAC address as well as user?
What kind of data source created the events? Some data source logs may not have that information. Best bet is to look at the packet tab and see if the data is even available. Assuming that the data is available, you may need to create a custom parser for it if the portions of the data you want aren't parsing.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.