Use case: filter incidents
- Last UpdatedFeb 08, 2018
- 1 minute read
Use case: Filter incidents by date, destination, and user
Create a filter that identifies incidents sent within the last 24 hours by a particular user.
Task
- In McAfee ePO, select .
- Select Data-in-use/motion from Present.
- Select Last 24 hours from the Time drop-down list.
- In Filters, click Edit.
- In Destination equals add the required destination.
- Select Username equals and add the name you want to look for.
- Select Update Filter.
- In the left panel select Group-by, then select Rule Set from the drop-down list.