topic Confusion regarding Endpoint log field in Endpoint

Confusion regarding Endpoint log field

eduardo21 — Fri, 14 Apr 2023 18:30:22 GMT

Hi everyone, how are you all doing?

I have a doubt. Why is the log field "Blade" showing up as SmartConsole?

As far as I know, events that pertain to the managing console are not sent to Endpoint Security, correct?

Can anyone explain to me what is going on here?

I've attached a screen capture that shows what I'm talking about.

Re: Confusion regarding Endpoint log field

PhoneBoy — Sat, 15 Apr 2023 00:16:33 GMT

Looks like someone logged into the management via SmartConsole.

Re: Confusion regarding Endpoint log field

Chris_Atkinson — Sat, 15 Apr 2023 03:09:36 GMT

Why do you think this is an Endpoint log?

In your environment are gateways and endpoints both managed from a single management instance ?

It looks like a typical audit log for an admins interaction with the console.

Re: Confusion regarding Endpoint log field

eduardo21 — Mon, 17 Apr 2023 12:02:51 GMT

What I meant by "Endpoint log" was a log viewed from the Harmony Endpoint portal. I was confused as to why does a log from Harmony Endpoint displays "SmartConsole" in the Blade field.

Re: Confusion regarding Endpoint log field

Chris_Atkinson — Mon, 17 Apr 2023 12:12:21 GMT

Do you ever use SmartEndpoint to connect to the console or only the Web UI?

Re: Confusion regarding Endpoint log field

eduardo21 — Mon, 17 Apr 2023 12:20:39 GMT

I normally open SmartConsole via it's application, since I have it installed locally. Does it generate a log that goes to the Harmony Endpoint portal if use some other method?

Re: Confusion regarding Endpoint log field

Chris_Atkinson — Tue, 18 Apr 2023 00:22:14 GMT

Understood and your gateways are managed using Smart-1 Cloud?

Re: Confusion regarding Endpoint log field

eduardo21 — Tue, 18 Apr 2023 12:00:28 GMT

No. The management is running R81.10.