the timestamp in the ELM what does it mean?

[Former Member]

Hi everyone,

I'm investigating ELM log files but I don't understand the 'timestamp' does that mean the time of the occurrence of the event itself or the time of saving the event in the ELM ?

Thank's All

[AdithyanT]

Hi @Former Member,

Thank you for your post. I would recommend moving this query to the below forum:

https://community.mcafee.com/t5/Security-Information-and-Event/bd-p/siem

The SIEM and ELM experts may have better visibility to answer this query.

You can however perform a simple test by performing an EICAR test on an endpoint and compare the "Event Generated Time" and "Event Reported Time" in ePO with the "timestamp" you get on ELM to confirm what it is.

[Former Member]

thank you AdithyanT for your replay