Jump to content

Log files from the user


Recommended Posts

The user can view their own log files on their PC.
Can these logs also be accessed via the Management Console or is this only possible on the respective PC?

Thanks for every tip.

B.S.

Link to comment
Share on other sites

  • Administrators

What logs are you interested in? Information about detections is available in the Detections panel, other data is typically available via reports. Diagnostic logging can be enabled in client details and generated records can be viewed there.

image.png

Link to comment
Share on other sites

Thanks.
Unfortunately I can't see any results here. However, the entries are available on the client. See the screenshot.

The aim is to find out which USB sticks are inserted into the PC and blocked. This way I can add the serial number to the exception list if necessary.

2024-03-21 12_08_25-Window.png

Link to comment
Share on other sites

  • Administrators

To accomplish that, you should:
1, Set the warning severity for the appropriate Device control block rule
2, Create a desired Device Control report, e.g.

image.png

Link to comment
Share on other sites

The report would help me. But here too it doesn't show me any data. The severity of the warning is set to “always”. And the entries are also displayed on the client. But how do I get it displayed on the server?

Link to comment
Share on other sites

  • Administrators
35 minutes ago, bschmitz7 said:

The severity of the warning is set to “always”.

Must be set to "warning", otherwise it won't be sent to ESET PROTECT.

Link to comment
Share on other sites

Unfortunately no.
Even if this is only set to Warning, the logs will not be sent to ESET PROTECT.
No entries are visible on the server at all.

Maybe a log collector is needed here?

Link to comment
Share on other sites

So the severity of the warning has no effect. It just has a different color in the logs.
I have now activated the diagnostic mode (via tasks) on a PC. Now I also receive the messages in ESET PROTECT.

The stupid thing is that it shows me as a warning that the PC has activated the diagnostic logs.

Better than nothing.
Many thanks for the help!

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...