Showing results for 
Search instead for 
Did you mean: 

Want to get help creating a custom query.

I want to know if there is a custom query I can create in ePO for mobile devices plugged in to any laptops and desktops in the network. I have created a custom query, but under Device Description for the query; it does not give any usable description. Only shows MTP USB Device. Some do show as Apple iPhone but other than that nothing else. This is the result type I used to create this query - DLP Data In-use/motion Incidents History. Not sure if there might be another type I can use that I am not aware of. Thanks in advance!
1 Reply
McAfee Employee DLP_RS
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Want to get help creating a custom query.

We can utilize the event id- 19115: Device Plug (Info) for any such custom query. However please note that role of Operating system plays a major role regarding identification of the devices connected to a machine and subsequent reporting.

Custom queries are largely a role of Professional Services. If requires, you can work with McAfee Technical Support for guidance.


More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center