Who equals to "System", what does that mean ?
Posted 16 April 2018 - 03:31 AM
Posted 17 April 2018 - 06:04 AM
It means that the product was not able to find the corresponding event in the target server security log, and it caused 'System' in the 'Who' field.
What is your current version of the product?
Please check that auditing settings are configured according to the following article: