McAfee ePolicy Orchestrator, Руководство пользователя, Страница: 68 / 126

65
ePolicy Orchestrator
®
3.6 Walkthrough Guide ePolicy Orchestrator Notifications
Determining which events are forwarded
6
Determining which events are forwarded
Along with being able to determine when events are forwarded to the server, you can
also select which events are forwarded.
To select which events are forwarded immediately:
1 In the console tree, select the desired ePolicy Orchestrator database server under
Reporting
and log onto it with ePolicy Orchestrator authentication.
2 Select
Events
in the console tree under the database server.
3 Select the
Filtering
tab in the details pane.
4 Select
Send only the selected events to ePO
on the
Filtering
tab.
5 Select the desired events in the list and click
Apply
.
Planning
Before creating rules that send notifications, you can save time by planning:
„
The types of events (both product and server) that could generate and send a
notification message in your environment.
„
Who should receive which notifications. For example, it may not be necessary to
notify the site administrator of site B about a failed replication in site A, but you may
want all site administrators to know that an infected file was discovered in site A.
„
Which types and levels of thresholds you want to set for each rule. For example, you
may not want to receive an e-mail message every time an infected file is detected
during an outbreak. Instead, you can choose to have such an e-mail message sent
— at most — once every five minutes, regardless of how often that server is
receiving the event.
„
Which command lines or registered executables you want to run when the
conditions of a rule are met.
Note
If you choose not to select which events are forwarded, all events are forwarded. This
is the default setting.
Note
You must be a global administrator to make any changes to the
Filtering
tab.