Forum Discussion
WinEventLog Security channel name is getting updated after patch KB5022286
Hi Team,
We are working on one Windows integration in which we are fetching the events from the WinEventLog Security channel. Earlier this integration was working fine and we were getting the channel name as "Security" as shown in the below image.
However, some of our customers have mentioned that after the Windows patch KB5022286, they are getting the channel name in the wrong format as "security" or "SECURITY" instead of "Security". We tried installing this patch in our local lab but we were not able to reproduce the issue that our customers are facing.
As our integration relies on the channel name being "Security" it is breaking for our customers after this patch.
Is this a known/expected behavior from a Microsoft Windows perspective after the patch KB5022286? Also, is it expected that the channel name can come in any case (SECURITY/security)?
Can you please share your insights on this behavior? Thank you!