bschmitz7 0 Posted March 21 Share Posted March 21 The user can view their own log files on their PC. Can these logs also be accessed via the Management Console or is this only possible on the respective PC? Thanks for every tip. B.S. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,250 Posted March 21 Administrators Share Posted March 21 What logs are you interested in? Information about detections is available in the Detections panel, other data is typically available via reports. Diagnostic logging can be enabled in client details and generated records can be viewed there. Link to comment Share on other sites More sharing options...
bschmitz7 0 Posted March 21 Author Share Posted March 21 Thanks. Unfortunately I can't see any results here. However, the entries are available on the client. See the screenshot. The aim is to find out which USB sticks are inserted into the PC and blocked. This way I can add the serial number to the exception list if necessary. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,250 Posted March 21 Administrators Share Posted March 21 To accomplish that, you should: 1, Set the warning severity for the appropriate Device control block rule 2, Create a desired Device Control report, e.g. Link to comment Share on other sites More sharing options...
bschmitz7 0 Posted March 21 Author Share Posted March 21 The report would help me. But here too it doesn't show me any data. The severity of the warning is set to “always”. And the entries are also displayed on the client. But how do I get it displayed on the server? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,250 Posted March 21 Administrators Share Posted March 21 35 minutes ago, bschmitz7 said: The severity of the warning is set to “always”. Must be set to "warning", otherwise it won't be sent to ESET PROTECT. Link to comment Share on other sites More sharing options...
bschmitz7 0 Posted March 21 Author Share Posted March 21 Unfortunately no. Even if this is only set to Warning, the logs will not be sent to ESET PROTECT. No entries are visible on the server at all. Maybe a log collector is needed here? Link to comment Share on other sites More sharing options...
bschmitz7 0 Posted March 21 Author Share Posted March 21 So the severity of the warning has no effect. It just has a different color in the logs. I have now activated the diagnostic mode (via tasks) on a PC. Now I also receive the messages in ESET PROTECT. The stupid thing is that it shows me as a warning that the PC has activated the diagnostic logs. Better than nothing. Many thanks for the help! Link to comment Share on other sites More sharing options...
Recommended Posts