Specifications

5
Click Event Description, in the Labels are list, under Threat Event Descriptions to create a filter with a
good human readable description of the events.
Optionally, you can also filter on the Event ID which is the number that represents client event data
in ePolicy Orchestrator. See McAfee Point Product generated Event IDs listed in ePO,
KnowledgeBase Article KB54677.
6
If needed, adjust the columns based on what kind of information you want displayed This is not
critical for the creation of the query.
7
Click Next, the Filter dialog box appears. You do not need any filtering since you want every single
client event returned in the database. Optionally, you can create a query based on events
generated within a certain time, for example the last 24 hours, or the last 7 days.
11
Reporting
Custom queries
90
McAfee
®
ePolicy Orchestrator
®
4.0 and 4.5 Best Practices Guide