Specifications

5
Click Next to not create any filters and display all of the operating system types.
6
Click Run to generate the report and see the results.
After you create the reports and display the output you can fine tune your report without starting
again from the beginning. To do this, click Edit Query. This allows you to go back and adjust your
report and run it again within seconds.
When you have made all the changes to your report to save it permanently, click Save. Then it is
included with your dashboards and you can run it any time.
Event summary queries
There are two important event types in your database, client events and threat events. These two
event types make up most of your event data in your database. Determine how many events are
stored in your database. This helps you manage any performance problems these events can cause
your McAfee ePO server and data base. See Purging events automatically for additional information.
Client events from your agents relate their task status to ePolicy Orchestrator. Items like update
complete, update failed, deployment completed, or encryption started are considered client events.
Threat events include a virus was found, a DLP event was triggered, or an intrusion was detected.
Depending on which products you have installed and which events you are collecting there might be
thousands or even millions of these events in your database.
ePolicy Orchestrator does not include any pre-configured queries to display which and how many
events are in your ePolicy Orchestrator database. But, you can build your own queries to show this data.
Creating client event summary queries
Create a new client events summary query. It displays events sent from your McAfee Agents to ePolicy
Orchestrator. Items like update complete, update failed, deployment completed, or encryption started
are considered client events.
Task
1
Click Menu | Reporting | Queries, the Queries dialog box appears.
2
Click Actions | New Query and the Query Wizard appears starting with the Result Types tab.
11
Reporting
Custom queries
88
McAfee
®
ePolicy Orchestrator
®
4.0 and 4.5 Best Practices Guide