Specifications
3
From the Repositories list, find the McAfee ePO server and click Disable in the Actions column.
4
Click Save to disable the McAfee ePO server repository.
Purge events automatically
Every day hundreds or thousands of events are sent to your McAfee ePO server for processing from all
your agents. These events can impact the performance of the McAfee ePO server and SQL Servers.
These events can be anything from a threat being detected, to an update completing successfully. In
smaller environments with a few hundred nodes you can purge these events on a nightly basis. But in
large environments with thousands of nodes reporting to your McAfee ePO server it is critical to delete
these events as they become old.
You need to determine your data retention rate. This can be from one month to an entire year. The
retention rate for most organizations is about six months. For example, as your events get six months
old, on schedule, they are deleted from your database.
It is very important that you purge your database on a nightly basis of events that have become stale.
In large environments your database size directly impacts the performance of your McAfee ePO server
and you must have a clean database.
ePolicy Orchestrator does not come with a preconfigured Server Task to
purge task events. This means many users never create a task to purge
these events and over time the McAfee ePO server SQL database starts
growing exponentially and is never cleaned.
There are two important event types in your database; client events and threat events. These two
event types are the bulk of your event data in your database. To find out the total number of client
and threat events in your database see Reporting.
Creating a purge events by query server task
Create an automated server task to delete all events in the database that are older than X number of
days (where X days is the retention rate for your organization).
10
Server tasks
Purge events automatically
74
McAfee
®
ePolicy Orchestrator
®
4.0 and 4.5 Best Practices Guide