88
Kaspersky Administration Kit
In order to do it the corresponding parameters in the policies for all anti-virus
applications must be appropriately configured (
On Administration Server for
(days)
must be checked on the
Logging
tab (cf. Figure 40) of event properties
windows for
Virus Detected
and
Virus, Worm, Trojan, and Hacker Software
Detected
).
Event
Virus attack
cannot be created more than once in 24 hours. You can
reset information about the occurrence of such event only be restarting the
Administration server service.
Figure 40. Configuring Event Logging
Notification procedure for the
Virus Outbreak
event is defined on the
Administration Server under Event Properties : Notification tab (see Figure 41).
Additionally, an automatic change of the current policy can be set as the reaction
for the occurrence of the virus outbreak. In order to do it, the
Activate policy
based on event
box must be checked
in the policy settings and the
Virus attack
event (see Figure 12) must be selected.