McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC, Product Manual

Page: 292 / 328

Use this... To do this...
Event
•
Event group
— Select an event group, such as
ePO Notification Events
.
•
Event type
— Select an event type that is part of the event group, such as
Server
.
Status
Enable or disable the response.
2
Click
Next
.
3 Select properties to narrow the events that trigger the response, then click
Next
.
4
Next to
Aggregation
, select one:
•
Trigger this response for every event
— generates a response for every event.
•
Trigger this response if multiple events occur within
— generates a response for multiple events that occur
during a specified time period and, if needed, after a certain number of events have occurred or
a certain property accumulates a specified number of distinct values.
5
Next to Grouping, select one:
•
Do not group aggregated events
— events of the same type are not aggregated.
•
Group aggregated events by
— a property of the event. For example, if you narrow your events by
audit, you can aggregate events that are noncompliant with the audit.
6 Next to Throttling, select the maximum time period that you want this response to occur.
7 Click
Next
.
8
Select
Create issue
from the drop-down list, then select the type of issue to create.
This choice determines the options that appear on this page.
22 Managing Issues and Tickets
Working with issues
292 McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide