Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

Unmatched WindowsSecurity Data ($Revision: #104 $)

I am getting a boat load of these alerts, "Unmatched WindowsSecurity Data ($Revision: #104 $)"  under LEM Internal Events.  I am running version 6.6.  Is there anyway to match this data to clear it from the internal events? 

0 Kudos
1 Reply
Level 11


You have a couple of options.

  1. Update your connectors.  Looks like 107 might be the latest version for that connector.
    • You can setup the SEM to have it automatically keep your connectors up to date on a daily basis.
  2. If updating your connectors does not help out then open up a case with support for unmatched data in order for it to get normalized.