cancel
Showing results for 
Search instead for 
Did you mean: 

Policy Modification Query / Reports

Jump to solution

Hi All,

Is there any way in McAfee ePO to find below Reports.

1. Date for Policy Creation

2. Last Policy Changed Date

3. Event for Policy Change.

Note: Policy stands for all product's Policies in McAfee ePO.

Regards,

TK

1 Solution

Accepted Solutions
Highlighted
blewis
Level 9
Report Inappropriate Content
Message 6 of 7

Re: Policy Modification Query / Reports

Jump to solution

I was looking for a report that listed when the Policy itself was changed.  I saw the "Policy Assignment Change History by User (30 Days)" report, but that only listed changes to the Policy "Assignments", not the change to the actual policy. 

I duplicated that report, then made the following changes:

2 Chart > Display Results As:  Multi-Line chart (old)  Table (new) 

4 Filter (replaced Policy Assignment values with:

  • Copy policy object
  • Create policy object
  • Delete policy object
  • Save policy object
  • Save policy settings

This gave me a report of when changes were made to the Policies. 

Changing the Chart type to Table just got rid of the summarizing and gave me the detail list.  I also added some more columns to the report.

These two reports are good to monitor changes to the policy and to assignments.

If you want Policy Object changes and Policy Assignment Changes all in one report, just add the above fields to the original report.

6 Replies

Re: Policy Modification Query / Reports

Jump to solution

Changes in ePO Query.JPG

Yes, Its under User Auditing.

Re: Policy Modification Query / Reports

Jump to solution

Hi Scott,

Thanks for your response but I already verified all sections in queries and no luck.

Regards,

TK

Re: Policy Modification Query / Reports

Jump to solution

Have you taken a look at this Dashboard? Its also loads the query

Here is the page link

Re: Policy Modification Query / Reports

Jump to solution

Think I found , by accident, what you were looking for

Open  Queries & Reports

Under McAfee Groups>Policy Assignment

The last query is labeled "Policy Assignment Change History by User (30 Days)

Highlighted
blewis
Level 9
Report Inappropriate Content
Message 6 of 7

Re: Policy Modification Query / Reports

Jump to solution

I was looking for a report that listed when the Policy itself was changed.  I saw the "Policy Assignment Change History by User (30 Days)" report, but that only listed changes to the Policy "Assignments", not the change to the actual policy. 

I duplicated that report, then made the following changes:

2 Chart > Display Results As:  Multi-Line chart (old)  Table (new) 

4 Filter (replaced Policy Assignment values with:

  • Copy policy object
  • Create policy object
  • Delete policy object
  • Save policy object
  • Save policy settings

This gave me a report of when changes were made to the Policies. 

Changing the Chart type to Table just got rid of the summarizing and gave me the detail list.  I also added some more columns to the report.

These two reports are good to monitor changes to the policy and to assignments.

If you want Policy Object changes and Policy Assignment Changes all in one report, just add the above fields to the original report.

Re: Policy Modification Query / Reports

Jump to solution

Hi Blewis,

Many Thanks to you.!!!

Regards,

Tushar Kotwal

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator