I'm seeing a ton of audit logs triggerd by the audit log clear button and also via the apply button.
The error in the logs:
The user security token does not match. The requested URL is /core/clearLastSelectedTab.do and request "referer" field is https://EPOSERVER:8443/core/orionNavigationLogin.do.
The user encountered HTTP error 403 trying to access the URL /core/clearLastSelectedTab.do.
My account is admin
See printscreen:
Audit log entries
I found this https://kc.mcafee.com/corporate/index?page=content&id=KB90725&actp=null&viewlocale=en_US&locale=en_U...
But the maxPostSize attribute is not set in my server.xml
Solved! Go to Solution.
My audit log clear button was resolved after ePO update 4 in two consoles
SR: 4-19980846141
I would suggest opening a ticket with McAfee for that one.
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
I am now seeing this too. Could be post activation of the new certificate in 510. Did you get an answer?
Did you check your server.xml for that value? What is the exact requested url that you are seeing in your audit log? For example, it could be this or a different one (if you post it, blank out your username)...
com.mcafee.orion.core.audit.AuditLog@84a048b[m_id=521917,m_tenantId=1,m_orionUserId=4,m_userName=username_priority=1,m_cmdName=Request URL,m_message=The user security token does not match. The requested URL is /ENDP_FW_META/clientrules/displayAggregatedRowDrillDown.do and request "referer" field is https://tstbpvav01:8443/ENDP_FW_META/ClientRulesManagement.do?
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
My audit log clear button was resolved after ePO update 4 in two consoles
SR: 4-19980846141
Great to hear! Thanks for the update.
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA