Query on Event ID 1035 - Cancelled Scan. What criteria constitutes a cancelled scan?
I'm trying to run a compliance report based off cancelled scans. I know that we can run a report off Event ID 1035 which indicates a scan was cancelled. Since this is an ePO managed scan, users do not have the ability to cancel a managed scan but they can defer it. Based off that scenario, what criteria would then constitute Event ID 1035 - Scan was cancelled?
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.