cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Jawn
Level 8
Report Inappropriate Content
Message 1 of 8

Is "Centralized Alerting" only for Central Management?

Jump to solution

Creating infection email alerts in ePO 5.9.0 and noticed a "Centralized Alerting" option. We do not have a "Central Management" architecture. Would including these options add any value?

1 Solution

Accepted Solutions
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 7 of 8

Re: Is "Centralized Alerting" only for Central Management?

Jump to solution

I'm not aware of any best practices guides for this, I'm afraid, since every environment is different in terms of their reporting / alerting needs. My advice would be start small, keep things as simple as possible, and monitor the performance of ePO and SQL as you add the responses to make sure you're not adversely affecting things. 

7 Replies
McAfee Employee hem
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: Is "Centralized Alerting" only for Central Management?

Jump to solution

You can use VSE Alert option (screenshot attached).

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?please select Accept as Solution in my reply and together we can help other members?
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 3 of 8

Re: Is "Centralized Alerting" only for Central Management?

Jump to solution

If you're only interested in generating alerts from within ePO, then you can ignore the centralised alerting features - ePO will trigger on the events uploaded directly from the clients.

The centralised alerting feature is useful for people who don't have ePO, but if you have ePO I would recommend using it as the alerting functions are considerably more advanced.

Jawn
Level 8
Report Inappropriate Content
Message 4 of 8

Re: Is "Centralized Alerting" only for Central Management?

Jump to solution
Seems reasonable, is there a limit to how many "/or" items I can add to an Automatic Response builder?
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 5 of 8

Re: Is "Centralized Alerting" only for Central Management?

Jump to solution

There's no hardcoded numerical limit  -instead there is a limit to how large the underlying SQL query can be. The UI will alert you if you try and exceed the limit.

However just because you *can* add hundreds of criteria, it doesn't mean you should 🙂 There's a very definite performance impact: the more complex the response rule, and the more rules you have, the more work SQL has to do to evaluate them. Ideally you want as few, and as simple, rules as possible.

Jawn
Level 8
Report Inappropriate Content
Message 6 of 8

Re: Is "Centralized Alerting" only for Central Management?

Jump to solution
Cool, thanks! Can you direct me to a "Best Practices" guide for an environment only using ESP, ESTP, and ESATP? (inc Agent and DXL__1000)
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 7 of 8

Re: Is "Centralized Alerting" only for Central Management?

Jump to solution

I'm not aware of any best practices guides for this, I'm afraid, since every environment is different in terms of their reporting / alerting needs. My advice would be start small, keep things as simple as possible, and monitor the performance of ePO and SQL as you add the responses to make sure you're not adversely affecting things. 

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 8 of 8

Re: Is "Centralized Alerting" only for Central Management?

Jump to solution
KB87843, KB74059, SNS2162 are some, you can search support.mcafee.com for best practices and also get with ens team for best practices they recommend.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community