Known Issue: Audits for protect, unprotect, and re-protect operations failing with “Failed to send logs, connection refused” errors may show incorrect severity and description in the Audit Store.
Description: This issue occurs when the Protectors log mode configuration is changed from “drop” to “error” mode. The Log Forwarder is not accepting connections. It may cause audits for protect, unprotect, and re-protect operations to show incorrect severity and descriptions.