McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC Product Manual page 292

22 Managing Issues and Tickets
Working with issues
Use this... To do this...
Event
Status
2 Click Next.
3 Select properties to narrow the events that trigger the response, then click Next.
Next to Aggregation, select one:
4
• Trigger this response for every event — generates a response for every event.
• Trigger this response if multiple events occur within — generates a response for multiple events that occur
during a specified time period and, if needed, after a certain number of events have occurred or
a certain property accumulates a specified number of distinct values.
5 Next to Grouping, select one:
• Do not group aggregated events — events of the same type are not aggregated.
• Group aggregated events by — a property of the event. For example, if you narrow your events by
audit, you can aggregate events that are noncompliant with the audit.
6 Next to Throttling, select the maximum time period that you want this response to occur.
Click Next.
7
8 Select Create issue from the drop-down list, then select the type of issue to create.
This choice determines the options that appear on this page.
®
292 McAfee ePolicy Orchestrator
• Event group — Select an event group, such as ePO Notification Events.
• Event type — Select an event type that is part of the event group, such as Server.
Enable or disable the response.
®
4.6.0 Software Product Guide