This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to filter out the SSH/Updater-B from reports

We run a monthly report for all viruses and then use that data. The SSH/Updater-B made the report over 900 pages and I think it is timing out to the database and failing to export because it is too big. We running Enterprise Console ver5.1.0.1839 and the report is: " All Computers, All Virus/Spyware Events, Last Month Week; sorted by Date. "
:35245


This thread was automatically locked due to age.
Parents
  • Hello jsouza,

    as you've found out you can only specify one inclusion using a pattern but no exclusion.

    There is no easy solution unless you want to (permanently) purge the, BTW, SHH/Updater-B entries from the database (which I don't suggest). It should affect "only" the September (and perhaps October) reports.

    You could work around this problem by adjusting the period so that (most of) the SHH events are excluded - although you might miss a few other alerts. Depending on how you use the data it might also be possible to split the reports around the time of the FP and apply the filtering to the exported data before merging them.

    Christian

    :35257
Reply
  • Hello jsouza,

    as you've found out you can only specify one inclusion using a pattern but no exclusion.

    There is no easy solution unless you want to (permanently) purge the, BTW, SHH/Updater-B entries from the database (which I don't suggest). It should affect "only" the September (and perhaps October) reports.

    You could work around this problem by adjusting the period so that (most of) the SHH events are excluded - although you might miss a few other alerts. Depending on how you use the data it might also be possible to split the reports around the time of the FP and apply the filtering to the exported data before merging them.

    Christian

    :35257
Children
No Data