Viewing event information
On the Events tab, a list of events is displayed that occurred on the computers managed by the selected Administration Server or received from Kaspersky Endpoint Security Cloud workspaces by the selected bridge.
Viewing event information
Click the Events tab to view additional information, obtained from the Kaspersky solution, about the security issues detected on a particular computer or group of computers.
In the top pane, you can configure filters to view only the events with selected properties. You can filter events by severity level, client, computer, or time of occurrence. To restrict your event selection and view only those events with selected properties, apply several filters at the same time. Every time you open the Events tab, the previously used filter settings are restored—there is no need to set up filters again.
Information on the events is displayed as a table. You can sort information in the table by any of the table columns by clicking the column header. For each event, you can view the following information:
- Client—Name of a ConnectWise Automate client company. The computer on which the event occurred belongs to this client. This field is applicable if you use Kaspersky Security Center; it is blank if you use Kaspersky Endpoint Security Cloud.
- Severity—Severity level of the event according to Kaspersky Security Center or Kaspersky Endpoint Security Cloud.
- Time occurred—Time when the event occurred.
- Computer—Name of the computer on which the event occurred. The computer name can be different in ConnectWise Automate and in the Kaspersky solution. The computer name for ConnectWise Automate is displayed on the first line of the entry and the name for Kaspersky Security Center / Kaspersky Endpoint Security Cloud on the second line. When you click the computer name, the Computer Management screen of ConnectWise Automate Control Center is displayed for this computer.
- Event—Name and description of the event.
When you select an event in the table, its properties are displayed in the pane on the right side of the screen. In addition to those in the table, the following event properties are displayed:
- Location—Name of the ConnectWise Automate location. The computer on which the event occurred belongs to this location. This field is displayed if you use Kaspersky Security Center; it is not displayed if you use Kaspersky Endpoint Security Cloud.
- Virtual Server—Name of the Kaspersky Security Center virtual server. The computer on which the event occurred is located on this server. This field is displayed if you use Kaspersky Security Center; it is not displayed if you use Kaspersky Endpoint Security Cloud.
- Kaspersky Security Center group—Name of a Kaspersky Security Center group. The computer on which the event occurred belongs to this group. This field is displayed if you use Kaspersky Security Center; it is not displayed if you use Kaspersky Endpoint Security Cloud.
- Application—Name of the application that the event is related to.
- Version—Version the application that the event is related to.
- Task—Name of the task that the event is related to. This field is displayed if you use Kaspersky Security Center; it is not displayed if you use Kaspersky Endpoint Security Cloud.