Showing results for 
Search instead for 
Did you mean: 

Devices with higher hit counts

Hello Guys

Normally, EPS Dashboard shows the count when the events are increased. I would like to create a dashboard which will show any source IP or Destination IP having higher hit count so that I dont have to go through TCP ,UDP connections and drilling down into them to see the source IPs. 

Can you please advise how I can create a dashboard to see count based connections on it ?

1 Reply
Reliable Contributor David1111
Reliable Contributor
Report Inappropriate Content
Message 2 of 2

Re: Devices with higher hit counts

Simply open a new TAB
add a new View set it as follow - Event Queries> Source IPs> Fields> Source IP, Count, Total Event Count.

Best regards.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator