BESClient.exe producing high number of log events

Hello,

We are seeing the BESClient.exe producing a high volume of events on several servers in the environment. It appears most servers are producing between 7k to 20k events in a 24 time frame. However, there are a dozen servers that are producing >50k events with several producing >300k events in a 24 time frame.

The BESClient.exe was upgrade to 10.0.3.66 and has been reinstalled. However, the high number of log events remain.

Just wanted to see if this group has seen this before and if it may be normal.

What type of log events? Who originates them? Remember the client is doing privileged work. Some items like looking at processes running take elevated privileges and some applications (like virus scanners) don’t like this and log events.
So it depends on what your events might be?

Thanks for the reply. All the log events are ‘An attempt was made to access an object’ where the source and destination IPs are the device itself.