McAfee EPOLICY ORCHESTRATOR 4.5 - Przewodnik Instalacji Pobierz pdf (Strona 90)

Click Next to skip the Columns dialog box. You can choose the columns you want to analyze.

You can skip this step because the McAfee ePO server does not use the

columns you choose in the server task.

Click Event ID in Available Properties under Client Events to create an Event ID filter. An Event ID row

is added in the Filter pane.

Click the plus sign, +, at the right to add another comparison row, add 1051 and 1059 in the Value

column, then click Run.

This setting filters the query and only returns 1051 and 1059 events as shown in the following

output figure.

Optionally, you can select all of these 1051 and 1059 events, click Actions | Purge to purge all of these

events in real time.

Instead of purging the events in real time during business hours you can create a server task that

runs the purge nightly during off hours. See Purging events automatically for details.

Create a new server task and give it an appropriate name. For example, Purge of 1051 and 1059

Events Nightly.

Click Purge Threat Event Log from the Actions list, then click Purge by Query.

Reporting on your managed environment with Queries

Custom queries

McAfee

ePolicy Orchestrator

Best Practices Guide for use with ePolicy Orchestrator versions 4.5.0 and 4.0.0

1 2 ... 85 86 87 88 89 90 91 92 93 94 95 ... 109 110

Brak uwag

McAfee EPOLICY ORCHESTRATOR 4.5 - Przewodnik Instalacji Strona 90