LOG PIPELINE ALERT

Host Event Stream Interrupted

Host

APP-SRV-12

Last event

02:14:08 UTC

Last event ID

1102

Collector status

Connected

Windows Event ID 1102 records audit-log clearing. The actor and motive still require investigation.