4 Replies Latest reply on Aug 6, 2009 12:26 PM by cdpayne

    EPO 4 Dashboard reports

      Hi all,

      I've seen threads complaining about too many 1051 and 1059 events occurring but haven't seen anyone asking why these cannot be excluded from the report that displays on the dashboard.

      I've changed the report to be as follows:

      Event Generated Time (UTC) Is within the last - 1 month
      and Event Category Belongs to - Malware
      and Detecting Product Name Equals - VirusScan
      and Event ID Does not equal - 1051
      and Event ID Does not equal - 1059

      Yet these two events still show up in the resulting report?

      Has anyone managed to exclude these successfully?

      I'd rather not tell Agents to stop reporting these events completely but at the moment I get a totally false view of virus activity.