Way to prevent collecting for Event ID within rule?

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

Way to prevent collecting for Event ID within rule?

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Networking & Security] >> GFI EventsManager >> Way to prevent collecting for Event ID within rule?

Page: [1]

Message

<< Older Topic Newer Topic >>

Way to prevent collecting for Event ID within rule? - 3.Jun.2009 9:49:41 AM

jwalzer

Posts: 53
Score: 0
Joined: 24.Jan.2007
Status: offline

I have the 'PCI Primary requirements Rule set' active for a few servers and within rules 10.2.2, the 540 Event ID is being collected and I would like to prevent that Event ID from being collected. Is there a way within the rule to prevent any 540 Events from being collected?

Thanks

Post #: 1

RE: Way to prevent collecting for Event ID within rule? - 4.Jun.2009 4:31:08 AM

DrewE

Posts: 1246
Score: 0
Joined: 28.Apr.2008
From: Cary, NC
Status: offline

Yes, you can add it as a "Noise Reduction" rule in the Event Sources page.

_____________________________

Drew Easley
GFI Software
Talk Tech To Me (GFI Blog) � Follow Us (Twitter) - Watch Us (YouTube) - Join us (Facebook)

(in reply to jwalzer)

Post #: 2