entity changes due to ossec database