Dear All,

I'd like to ask you if you have notice same kind of issue on Sentinel
environment, we notice from time to time we are observed duplicated
events on Sentinel server. For example: someone login to Red Hat server,
instead of collect one event we found out 1800 of these on event console
and also in rawdata stored on Sentinel . First we think it was caused by
not simply configuration on Red Hat side but almost in the same time we
catch similar incident but this generated by Windows server. So my
question is, do you have observed same kind issue ?

Arek M.

ps. Sentinel 7.3.1

arekmacak's Profile:
View this thread: