cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Devices with higher hit counts

Hello Guys

Normally, EPS Dashboard shows the count when the events are increased. I would like to create a dashboard which will show any source IP or Destination IP having higher hit count so that I dont have to go through TCP ,UDP connections and drilling down into them to see the source IPs. 

Can you please advise how I can create a dashboard to see count based connections on it ?

1 Reply
Reliable Contributor David1111
Reliable Contributor
Report Inappropriate Content
Message 2 of 2

Re: Devices with higher hit counts

Hi
Simply open a new TAB
add a new View set it as follow - Event Queries> Source IPs> Fields> Source IP, Count, Total Event Count.

Best regards.

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center