Suppress warnings in SEC

I assume you could use the erroralertfilters table as per:
https://community.sophos.com/products/endpoint-security-control/f/sophos-endpoint-software/79603/e03d0056/339407#339407

You can always remove the entry later to resume getting them.  Existing ones would need to be cleared but it would filter out new.  I don't have a SEC console to hand to check the code you would need to add but it should be obvious.

Regards,

Jak

I assume you could use the erroralertfilters table as per:
https://community.sophos.com/products/endpoint-security-control/f/sophos-endpoint-software/79603/e03d0056/339407#339407

You can always remove the entry later to resume getting them.  Existing ones would need to be cleared but it would filter out new.  I don't have a SEC console to hand to check the code you would need to add but it should be obvious.

Regards,

Jak

Thanks Jak as always.... I think is what I needed, just in case what's the command to remove the alert from the filter?

Ok I've added the filter using your command but i'm still getting the restart messages in SEC?

The warning code on SEC is 0000006d which corresponds to 109 in decimal? 

I've purge the remaining error from sec using PrugeDB  PurgeDB.exe -action=delete -category=errors -HistoryLengthInDays=0 -type=AutoUpdate -code=109

I've then ran your command

osql -E -S .\sophos -d SOPHOS551 -Q "insert into dbo.ErrorAlertFilters ([Source], [Number]) VALUES ('SAV', '109')"

and then confirmed the filter is in place with 

osql -E -S .\sophos -d SOPHOS551 -Q "select * FROM dbo.ErrorAlertFilters" -o C:\ErrorAlertFilters.txt -w 1000 

am I missing something?