Determining Which Events Are Forwarded; Planning - McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual

®
ePolicy Orchestrator 3.6 Walkthrough Guide

Determining which events are forwarded

Planning

Along with being able to determine when events are forwarded to the server, you can
also select which events are forwarded.
If you choose not to select which events are forwarded, all events are forwarded. This
is the default setting.
Note
To select which events are forwarded immediately:
1 In the console tree, select the desired ePolicy Orchestrator database server under
Reporting
and log onto it with ePolicy Orchestrator authentication.
Events
2 Select in the console tree under the database server.
Filtering
3 Select the tab in the details pane.
You must be a global administrator to make any changes to the
Note
Send only the selected events to ePO
4 Select
5 Select the desired events in the list and click
Before creating rules that send notifications, you can save time by planning:
The types of events (both product and server) that could generate and send a
notification message in your environment.
Who should receive which notifications. For example, it may not be necessary to
notify the site administrator of site B about a failed replication in site A, but you may
want all site administrators to know that an infected file was discovered in site A.
Which types and levels of thresholds you want to set for each rule. For example, you
may not want to receive an e-mail message every time an infected file is detected
during an outbreak. Instead, you can choose to have such an e-mail message sent
— at most — once every five minutes, regardless of how often that server is
receiving the event.
Which command lines or registered executables you want to run when the
conditions of a rule are met.
Filtering
on the tab.
Apply
.
65
ePolicy Orchestrator Notifications
Determining which events are forwarded
Filtering
tab.
6