Help
9 Viewing events
9.1 About events
When an application control, data control, device control, firewall, patch assessment, tamper protection, web control or encryption event occurs on an endpoint computer, for example, an application has been blocked by the firewall, that event is sent to Enterprise Console and can be viewed in the respective event viewer.
Using the event viewers, you can investigate events that have occurred on the network. You can also generate a list of events based on a filter you configure, for example, a list of all data control events for the past seven days generated by a certain user.
The number of computers with events over a specified threshold within the last seven days is displayed on the Dashboard (except for tamper protection events). For information on how to set up the threshold, see
Configure the Dashboard
(page 56).
You can also set up alerts to be sent to your chosen recipients when an event has occurred. For more information, see
About alerts and messages
(page 186).
9.2 View application control events
To view application control events:
1. On the Events menu, click Application Control Events.
The Application Control - Event Viewer dialog box appears.
2. In the Search period field, click the drop-down arrow and select the period for which you want to display the events.
You can either select a fixed period, for example, Within 24 hours, or select Custom and specify your own time period by selecting the starting and ending dates and times.
3. If you want to view events for a certain user or computer, enter the name in the respective field.
If you leave the fields empty, events for all users and computers will be displayed.
You can use wildcards in these fields. Use ? for any single character and * for any string of characters.
4. If you want to view events for a certain application type, in the Application type field, click the drop-down arrow and select the application type.
By default, the event viewer displays events for all application types.
5. Click Search to display a list of events.
You can export the list of application control events to a file. For details, see Export the list of events to a file
(page 204).
195
