This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Error Message Suppression in Enterprise Console.

Hi all, I am trying to suppress some messages in the enterprise console as they are not relevant and just taking up room.

This is the error that is annoying me :-) http://www.sophos.com/support/knowledgebase/article/14383.html

I have exported my savconf.xml file and adjusted with adding the following to the end of the file as instructed !

http://www.sophos.com/support/knowledgebase/article/54229.html

Placed before </config> tag in exported savconf.xml

<inst:install xmlns:inst="http://www.sophos.com/SAVXP/SavInstallConfiguration" xmlns="http://www.sophos.com/SAVXP/SavInstallConfiguration">
 <onAccess>
  <suppressErrors>
   <item>53</item>
  </suppressErrors>
 </onAccess>
</inst:install>

I have then imported my savconf.xml file
by placing the xml file in my \\servername\interchk\esxp\ area
the output displayed in the dos windows does show that the file has been read but the messages still appear in my console.
just as a side note i did try this method but also had no joy http://www.sophos.com/support/knowledgebase/article/13872.html
Any help is appreciated on this
Kind regards
paul

:3070


This thread was automatically locked due to age.
Parents
  • Hello Paul,

    I know these messages ...

    I think only 13872 applies as the other two are about writing (or not writing) to the event log. I haven't tried it (yet) as I'm not sure how it will work in the long run.

    Question (especially to Sophos)

    How does using savconf.xml work and do savconf.xml and SEC "interact"?

    As far as I understand a client will pick up savconf.xml at installation or on the next update. When the AV policy is changed in SEC - what will happen? Will the blacklisting/whitelisting be kept even though it is not contained in the policy sent from SEC? How does the client know that it should not apply savconf.xml again?

    I'm too lazy to run some tests :smileywink:

    And - I vaguely remember an article about inserting "something" into the database which would keep certain error codes from being entered into the database and I might even have used it (perhaps it's the ErrorAlertFilters table). Can't find the article ....

    Christian

    :3077
Reply
  • Hello Paul,

    I know these messages ...

    I think only 13872 applies as the other two are about writing (or not writing) to the event log. I haven't tried it (yet) as I'm not sure how it will work in the long run.

    Question (especially to Sophos)

    How does using savconf.xml work and do savconf.xml and SEC "interact"?

    As far as I understand a client will pick up savconf.xml at installation or on the next update. When the AV policy is changed in SEC - what will happen? Will the blacklisting/whitelisting be kept even though it is not contained in the policy sent from SEC? How does the client know that it should not apply savconf.xml again?

    I'm too lazy to run some tests :smileywink:

    And - I vaguely remember an article about inserting "something" into the database which would keep certain error codes from being entered into the database and I might even have used it (perhaps it's the ErrorAlertFilters table). Can't find the article ....

    Christian

    :3077
Children
No Data