I am looking for a response whenever there is a 'New System' action reported in the User Audit Log
User Name: system Priority: Medium Action: New system Details: Adding system: "thenewserverhostname" Success: Succeeded Start Time: 12/18/15 12:29:39 PM EST Completion Time: 12/18/15 12:29:39 PM EST
I have had a quick look, the usual method I would use would be to create an Automatic Response to an ePO Server Event, but I cannot find an event for a New System.
If you are sync'ing system from Active Directory or a Data Centre connector you can edit the configuration for the Sync setting to apply a tag when a new system is added to the tree:
Certified McAfee Product Specialist - ePO
McAfee Volunteer Moderator
Unfortunately no. We are not using AD sync'.
What is strange is that it is already stored in the db (EPOLeafNode table, the NodeCreatedDate value) but I cannot query it through the console.