Are you using Mvision ePO?
AFAIK, we have server and workstation as default tags. Please share the screenshot where you see 'Escalated system' tag.
See KB90763 - that is from Protection Workspace, which is also available in the on-prem version of epo if you have that extension checked in. A system is escalated if it detects 5 threats or more in 24 hours.
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?