Release Notes › Known Issues › Agents and CA Adapters › WMI Log Sensor Generates Multiple User Privilege Events

WMI Log Sensor Generates Multiple User Privilege Events

Symptom:

When using a connector with the WMI Log Sensor to collect events, you may observe multiple events related to "privilege use."

Solution:

These events appear if the Windows audit policy that records successful privilege use actions is enabled on the target system. They are a by-product of the event gathering process, and do not indicate any problem. You can create a suppression rule to stop CA Enterprise Log Manager from receiving them if you do not want them to appear.