Create Event Distribution Report with Baseline

[tdefoor]

Hello!

I'm looking to do a weekly report that shows a simple event distribution with a baseline for the previous week across my receivers and ACE. 

I can get the event distribution, but it is useless without the baseline. Does anyone know if this feature is available or if there is a work around for it? I am on 10.3.1.

[trisiem]

May be this forum answer can help you: https://community.mcafee.com/t5/Security-Information-and-Event/ESM-API-Get-event-distribution-date-h...