Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 15637 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application control - how to identify specific client with Controlled Application?

NTSys

We've enabled Application Control in "Detect but allow to run" mode for pretty much everything to get a feel for what is out there - this has created a lot of events. Reporting "Alerts and events by item name" shows some applications that we want to investigate, but how can we drill down to see which client has raised a particular application event?

I had hoped I could create an SQL query but the database doesn't seem to have any Application Control tables...

:10965


This thread was automatically locked due to age.
Parents
  • 0

    Thank you all for the replies - I'll go with the easy View option to start with!

    @Placebo - thanks for the links to your posts - I'd seen them before but forgotten.

    @John - any chance Placebos SQL queries could form a sticky or KB article?

    :11049
Reply
  • 0

    Thank you all for the replies - I'll go with the easy View option to start with!

    @Placebo - thanks for the links to your posts - I'd seen them before but forgotten.

    @John - any chance Placebos SQL queries could form a sticky or KB article?

    :11049
Children
No Data