search

CrowdStrike / falcon-orchestrator

CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
GNU Affero General Public License v3.0
185 stars 60 forks source link

Malformed audit event timestamp, failing over to current time #47

Closed doncountduckula closed 6 years ago

doncountduckula commented 6 years ago

Hi there - I'm seeing this event every couple minutes in the 'runlog' - I'm receiving detection events but not sure if this is a problem.

'2018-02-21 14:52:45,948 WARN FalconOrchestrator.Client.AuditEvent - Malformed audit event timestamp, failing over to current time'

Thanks so much in advance.

mr-burnse commented 6 years ago

Hey @doncountduckula, This is expected and can be safely ignored. I would also suggest setting the log configuration to ERROR for normal operation. That way these messages wont grow the log file over time.