There has been previous discussions to have an ePO switch and the ability to have the client save the logs and archive on the ePO server. My understanding was that the computer name would be used in the file names to avoid collisions. But I think that the client was supposed to use a file share for this process.
I suggest that Windows file shares should not be used. Instead, the Getsusp program should use the McAfee Agent data channel to store the information in the ePO DB. We should have access to the file and log data via the ePO console.
The benefits as I see them to this implementation are:
Message was edited by: HBullock on 12/4/10 3:06:07 PM CST
Message was edited by: HBullock on 12/5/10 11:15:29 AM CST
Thank you for the invaluable feedback. Will initiate a dialogue with the ePO team on the feasibility of your suggestion.