Thanks for confirming the McAfee version. Moving your post to ePO
Run the query, which lists the top ten events, that could be 1092, 1095 etc.
select threateventid, count(threateventid)as threateventcount, threatname, threattype fromepoevents group by threateventid, threatname, threattype order by threateventcount desc
Now run the below query.
SET rowcount 10000DELETE FROM epoEventsWHERE threateventid = '1095'WHILE @@rowcount > 0BEGINDELETE FROM epoEventsWHERE threateventid = '1095'ENDSET rowcount 0GO
@Hemurali If the above query is not working then try this one.
SET rowcount 10000DELETE FROM epoEventsMTWHERE threateventid = '1095'WHILE @@rowcount > 0BEGINDELETE FROM epoEventsMTWHERE threateventid = '1095'ENDSET rowcount 0GO
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center