cancel
Showing results for 
Search instead for 
Did you mean: 

Re: Purging of Events of a particular Event ID with in a time period

@Hemurali 

Thanks for confirming the McAfee version. Moving your post to ePO 

Regards
Siva

2 Replies
Highlighted
Reliable Contributor vnaidu
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: Purging of Events of a particular Event ID with in a time period

@Hemurali 

Murali,

Run the query, which lists the top ten events, that could be 1092, 1095 etc.

select threateventid, count(threateventid)as threateventcount, threatname, threattype from
epoevents group by threateventid, threatname, threattype order by threateventcount desc

Now run the below query.

 

SET rowcount 10000
DELETE FROM epoEvents
WHERE threateventid = '1095'
WHILE @@rowcount > 0
BEGIN
DELETE FROM epoEvents
WHERE threateventid = '1095'
END
SET rowcount 0
GO

Venu
Reliable Contributor vnaidu
Reliable Contributor
Report Inappropriate Content
Message 3 of 3

Re: Purging of Events of a particular Event ID with in a time period

@Hemurali If the above query is not working then try this one.

SET rowcount 10000
DELETE FROM epoEventsMT
WHERE threateventid = '1095'
WHILE @@rowcount > 0
BEGIN
DELETE FROM epoEventsMT
WHERE threateventid = '1095'
END
SET rowcount 0
GO

Venu
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator