Content-based Critical System Logs

[DawgsFan]

Content-based Critical System Logs

For additional resources regarding BPA, visit our LIVEcommunity BPA tool page.

View videos regarding BPA Network best practice checks.

View videos regarding BPA Policies best practice checks.

View videos regarding BPA Objects best practice checks.

View videos regarding BPA Device best practice checks.

You may also view other BPA video playlist on the LIVEcommunity YouTube channel.

[apiche1]

I noticed BPA's are now recommending:

Content-Based Critical System Logs (Fail)

It is recommended to have a filter with syntax: (severity eq critical) and ( (description contains Content) or (description contains content) )

Do you have more information what why we would filter on "Content" or "content"?