McAfee ePO - Logging error occurred

Requête originale, sans modification.

McAfeeEPOEvent
| where EventId in ('1040', '1076', '3032', '3033', '3034', '3036', '3038')
| extend EventMessage = case(EventId == '1040', 'Activity Log error',
                              EventId == '1076', 'Error logging information',
                              EventId == '3032', 'Error while trying to open/create activity log file',
                              EventId == '3033', 'Activity log file maximum size reached',
                              EventId == '3034', 'Unable to write the activity log file',
                              EventId == '3036', 'Error during initialization of the activity log file',
                              'Error writing to log')
| project DvcIpAddr, EventId, EventMessage
| extend IPCustomEntity = DvcIpAddr