cancel
Showing results for 
Search instead for 
Did you mean: 

When are EPS rates calculated?

Hi all,

Are EPS rates calculated before, or after, policy filter rules? 

Let's say I have a data source that's going crazy.  The ESM keeps reporting that the EPS rate has been exceeded.  I have our tech team investigating the source of the events.  In the meantime, I create a filter with a PCRE and do NOT have the events sent to the parser.

Will I continue to exceed the EPS rate?

Any help is appreciated.

Thanks!

- Steve Kadish

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support
  • The McAfee ePO Support Center Plug-in is now available in the Software Manager. Follow the instructions in the Product Guide for more.