Prisma Cloud Compute : Mount of the HOST audit log missing from Defender version 22.01 onwards

Prisma Cloud Compute : Mount of the HOST audit log missing from Defender version 22.01 onwards

4376
Created On 03/29/23 03:53 AM - Last Modified 04/07/23 10:17 AM


Symptom


Example
  • Below is a screenshot comparing the Defender Yaml File of version 21.08 (LEFT) and 22.06 (RIGHT)
audit log mount difference.png
  • It is found that the Mount of the HOST audit log is missing in Defender version 22.06

Environment


  • Prisma Cloud Compute (SAAS and Self-Hosted)
  • Defender version 22.01 and above

Cause


  • Starting Joule release (22.01), Mount of the HOST audit log was removed from Defender Deployment because it wasn't used while it was originally included in the YAML file

Resolution


  • This is expected as per design and doesn’t change or affect the Defender’s behaviour

Additional Information


  • This is no longer recorded or stored elsewhere as this is not being used anymore
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kHYXCA2&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language