This content has been marked as final. Show 3 replies
Hi - wondering what kind of reporting you are looking for?
I'm looking into this currently; specifically for the Run time for our weekly on-demand scan. Since it doesn't look like there is any way to get this information directly from ePO reports, I'm going to try to derive it by comparing event ID 1202 (scan start) and 1203 (scan stop).
Oddly it looks like these events are not sent up to ePO by default (ePO 3.6/VSE 8.5) so I've just turned that on.
If anyone has any better methods please share...?
Thanks for the reply.
What I would like is just a report that shows which on-demand scans did/or did not run last night. An overall snapshot would be nice. One that I could generate per-group would be even better. This is proof to management that policies I have deployed are being enforced. I think what McAfee told me is that this data is stored locally on the client and is normally not reported back to the epo server...
If you're using ePO 3.6:
Go to Reporting > ePO Databases > (Your Database) > Events
Make sure there is a checkbox next to  and  (assuming you are filtering which events are sent up to ePO)
Then it'll be up to you to write a custom query to pull those events out of the Events table. Not as nice as a canned report with shiny charts and graphs, but it works.