Version

Argent for Compliance 3.1A-1601-C or earlier

Date

Tuesday, 12 April 2016

Summary

If comparison text in Windows Event Log Rule contains double quotes, bad syntax error can be resulted when being saved in Win32 main GUI

Click For Full Size

Though the Rule might be saved successfully using Argent Global Manager, the Engine won’t be able to run this Rule due to the syntax error

The issue has been addressed in Argent AT 3.1A-1601-T8

The double quotes are escaped before saving into database and restored by Engine when reading back from database

Click For Full Size

Technical Background

N/A

Resolution

Upgrade to Argent AT 3.1A-1601-T8 or later