Specifications

8
Click Run to display the query report.
In this example there are 308 client events total. If you want, you can click one event and drill
down on it to find out more information.
9
Click Save and give the report an appropriate name. For example, All Client Events by Event
Description.
Creating threat events summary query
Create a threat events summary query. It displays threat events sent from your McAfee Agents to
ePolicy Orchestrator. Threat events include a virus was found, a Data Loss Protection event was
triggered, or an intrusion was detected.
Task
1
Click Menu | Reporting | Queries, the Queries dialog box appears.
2
Click Actions | New Query and the Query Wizard appears starting with the Result Types tab.
3
Click Events in the Features Group and Threat Events in the Result Type. Click Next to continue to the
Chart dialog box.
4
Under Summary, click Single Group Summary Table, to display a total count of all the client events in the
events table.
Reporting
Custom queries
11
McAfee
®
ePolicy Orchestrator
®
4.0 and 4.5 Best Practices Guide
91