Way to prevent collecting for Event ID within rule? (Full Version)

All Forums >> [Networking & Security] >> GFI EventsManager



Message

jwalzer -> Way to prevent collecting for Event ID within rule? (3.Jun.2009 9:49:41 AM)

I have the 'PCI Primary requirements Rule set' active for a few servers and within rules 10.2.2, the 540 Event ID is being collected and I would like to prevent that Event ID from being collected. Is there a way within the rule to prevent any 540 Events from being collected?

Thanks



DrewE -> RE: Way to prevent collecting for Event ID within rule? (4.Jun.2009 4:31:08 AM)

Yes, you can add it as a "Noise Reduction" rule in the Event Sources page.



Page: [1]