cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How do you creat an ESM data source inactivity report?

Jump to solution

I'm running ESM v9.4.2 and I have many devices with the Yellow flag due to inactivity. I'd like to generate a report that includes all the devices that haven't sent logs for x amount of time (maybe a weekly report of the previous week, or a daily report of devices that haven't sent logs in > 7 days). I've looked around for a while, read the user guide, and searched the web for help but haven't found anything. Can someone provide instructions for creating such a report?

1 Solution

Accepted Solutions
Highlighted

Re: How do you creat an ESM data source inactivity report?

Jump to solution

Hi,

This option is available in 9.4.2 but only when you login as NGCP. There is no option to give other users the rights tro access this feature. I believe the same applies to 9.5.x.

View solution in original post

15 Replies
Highlighted

Re: How do you creat an ESM data source inactivity report?

Jump to solution

Moved this to Security Information and Event Management (SIEM) for better support.

---

Peter

Moderator

Highlighted

Re: How do you creat an ESM data source inactivity report?

Jump to solution

Thanks Peter. I don't seem to have the ability to choose any of the Enterprise "places" so I couldn't put it there.

Highlighted

Re: How do you creat an ESM data source inactivity report?

Jump to solution

This community software can be a little picky at times, often when you think you are logged in, in actual fact you aren't.  That's probably what happened.

Highlighted

Re: How do you creat an ESM data source inactivity report?

Jump to solution

What else should I do to try to get an answer? Is this a really hard report to create, or is it so basic that it doesn't dignify a response?

Highlighted
Level 10
Report Inappropriate Content
Message 6 of 16

Re: How do you creat an ESM data source inactivity report?

Jump to solution

Hey michael,

I don't know if you have the same option as I in 9.5, but basically you can export a list from the Receiver Properties > Receiver Management > Time Delta.

Regards

Highlighted

Re: How do you creat an ESM data source inactivity report?

Jump to solution

, I looked for that option but I wasn't able to find it. I've attached snapshot of what options I have when I go to Receiver Properties > Receiver Management

Capture.PNG

Highlighted
Level 10
Report Inappropriate Content
Message 8 of 16

Re: How do you creat an ESM data source inactivity report?

Jump to solution

Found somewhere else where sou can find this information

ESM Properties > System Information > "Device Summary Reports : " View Reports (button at the bottom) and then sort by "Last Event Time"

screen.png

Highlighted

Re: How do you creat an ESM data source inactivity report?

Jump to solution

What version of ESM was that? I'm running 9.4.2 and I don't show that option. Mine is a combo box, so ESM and ELM is combined. Is there some feature/function option I need to enable before I can see that Device Summary Reports? Thanks for your help

Capture.PNG

Highlighted

Re: How do you creat an ESM data source inactivity report?

Jump to solution

Hi,

This option is available in 9.4.2 but only when you login as NGCP. There is no option to give other users the rights tro access this feature. I believe the same applies to 9.5.x.

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community