When using the DLP Help Desk Tool to generate override codes for DLP endpoint agents, I am unable to get any of the associated events to appear in the DLP monitor.
The Help Desk Tool successfully generates release codes and connects to the database without error. I attempted to create filters to show the following administrative events: "Agent Override Key Generated", "Agent Enters Bypass Mode", and "Agent Leaves Bypass Mode".
However, all I get is a blank screen, as the filter returns no events.
Under "agent configuration", all events are selected to be reported by the agents.
Our DLP Monitor is showing client events for all of our device rules, with no problems.
Any tips on how to troubleshoot this are appreciated.
Does the Agent bypass work correctly, even though nothing comes up in DLP Monitor?
Which version of DLP endpoint are you using?
Have you tried sending the events back to the server, by clicking "Send Events" from the McAfee Agent Monitor on the workstation, soon after the bypass is enabled?
Can you see the activity in the ePO Audit Log?