This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Suppress warnings in SEC

Is there anyway we could suppress reboot warnings? We have 15,000 clients managed by SEC and can have upto 2-3000 reboot warnings at anyone time which is very annoying!

I'm sure I've read somewhere that it can be done?

Any suggestions very much appreciated.

This thread was automatically locked due to age.

+1 jak over 6 years ago

I assume you could use the erroralertfilters table as per:
https://community.sophos.com/products/endpoint-security-control/f/sophos-endpoint-software/79603/e03d0056/339407#339407

You can always remove the entry later to resume getting them. Existing ones would need to be cleared but it would filter out new. I don't have a SEC console to hand to check the code you would need to add but it should be obvious.

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel
0 TomHilton over 6 years ago in reply to jak

Thanks Jak as always.... I think is what I needed, just in case what's the command to remove the alert from the filter?
Cancel
Vote Up 0 Vote Down

Cancel
0 TomHilton over 6 years ago in reply to jak

Ok I've added the filter using your command but i'm still getting the restart messages in SEC?

The warning code on SEC is 0000006d which corresponds to 109 in decimal?

I've purge the remaining error from sec using PrugeDB PurgeDB.exe -action=delete -category=errors -HistoryLengthInDays=0 -type=AutoUpdate -code=109

I've then ran your command

osql -E -S .\sophos -d SOPHOS551 -Q "insert into dbo.ErrorAlertFilters ([Source], [Number]) VALUES ('SAV', '109')"

and then confirmed the filter is in place with

osql -E -S .\sophos -d SOPHOS551 -Q "select * FROM dbo.ErrorAlertFilters" -o C:\ErrorAlertFilters.txt -w 1000

am I missing something?
Cancel
Vote Up 0 Vote Down

Cancel