https://community.splunk.com/t5/Security/How-to-take-mcafee-virus-scan-and-endpoint-security-version/m-p/317463#M12616 <P>Hello,</P> <P>The EPOProdPropsView_VIRUSCAN fields are not present in the new version of McAfee : Endpoint Security replaces Virus Scan. Therefore, we cannot access the version data anymore, which is a problem for security logs analysis.<BR /> We have seen an answer which brings a partial solution to our problem:<BR /> <A href="https://answers.splunk.com/answers/626506/moving-from-mcafee-vse-to-ens.html">https://answers.splunk.com/answers/626506/moving-from-mcafee-vse-to-ens.html</A><BR /> However, the two versions are currently being used, we need the query to take both into account.</P> <P>Could the Splunk team who develops the McAfee addon update the query to take both versions into account?</P> <P>Thanks</P> <P>Best regards,</P> Mon, 09 Apr 2018 12:22:13 GMT SarahSplunk123 2018-04-09T12:22:13Z https://community.splunk.com/t5/Security/How-to-take-mcafee-virus-scan-and-endpoint-security-version/m-p/317463#M12616 <P>Hello,</P> <P>The EPOProdPropsView_VIRUSCAN fields are not present in the new version of McAfee : Endpoint Security replaces Virus Scan. Therefore, we cannot access the version data anymore, which is a problem for security logs analysis.<BR /> We have seen an answer which brings a partial solution to our problem:<BR /> <A href="https://answers.splunk.com/answers/626506/moving-from-mcafee-vse-to-ens.html">https://answers.splunk.com/answers/626506/moving-from-mcafee-vse-to-ens.html</A><BR /> However, the two versions are currently being used, we need the query to take both into account.</P> <P>Could the Splunk team who develops the McAfee addon update the query to take both versions into account?</P> <P>Thanks</P> <P>Best regards,</P> Mon, 09 Apr 2018 12:22:13 GMT https://community.splunk.com/t5/Security/How-to-take-mcafee-virus-scan-and-endpoint-security-version/m-p/317463#M12616 SarahSplunk123 2018-04-09T12:22:13Z