Do not send reports if not events

[alfoc]

Hi all,

using ESM 9.6.1 how can I avoid sending a report if there are no events? (the report contains filters for source IP)

Thank you very much,

Alfonso

[bretzeli]

Absolute this is the MOST worst part BECAUSE.

" This is normaly the ONLY part (The PDF reports) we send to CTI/CIO and he evers sees from Mcafee. Mostly one first page there is some legal info and how the Report and E-Mail tasked is named and where it runs.

SO if the report contains NO Data (IS empty) you scroll down and ther is no data in IT. So just hurt/messup most where the decission IF mcafee is buyed and you have the greatedt influence on customers and there you fail. Everything behing is perfect but thats the only part the CIO seed once a week or day...

Change IT asap please! Not only from a technical view but also marketing.

You can at some points filter reports with data BUT not on all: Likle ATP top 10 detected files / DAC top ten files etc. Also on the TIE report we would like to COTAIN the CLIENT it was used (Event if its agansz some EU law). because they will get info anway. But i think it's not even because of LAW they just messed up the TIE repoerting because it runs under POSTGRE...