Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 15744 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application control - how to identify specific client with Controlled Application?

NTSys

We've enabled Application Control in "Detect but allow to run" mode for pretty much everything to get a feel for what is out there - this has created a lot of events. Reporting "Alerts and events by item name" shows some applications that we want to investigate, but how can we drill down to see which client has raised a particular application event?

I had hoped I could create an SQL query but the database doesn't seem to have any Application Control tables...

:10965


This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    The information you require can be found in the event viewer and you're not the first person to be unaware of its existance. It can be found in the "View" menu within SEC.

    BTW we are introducing a dedicated "Events" menu in ESC 10 to make it much easier to locate the various event viewers.

    Best regards,

    John (Product Manager)

    :11033
Reply
  • 0

    Hi,

    The information you require can be found in the event viewer and you're not the first person to be unaware of its existance. It can be found in the "View" menu within SEC.

    BTW we are introducing a dedicated "Events" menu in ESC 10 to make it much easier to locate the various event viewers.

    Best regards,

    John (Product Manager)

    :11033
Children
No Data
Unfiltered HTML