topic Re: Filtering of Event Subscriptions by Severity in Endpoint Security

Filtering of Event Subscriptions by Severity

scott.eakin — Fri, 13 Nov 2020 22:58:22 GMT

In Cisco AMP for Endpoints console, you can filter down to the smallest aspect and subscribe to that filter. However, I can't see how to filter at the broad level by severity. We have the events open tickets in our support system and want the Medium+ events to do it immediately and the low severity items to come in a daily (or weekly) digest notification.

Is this possible?

Re: Filtering of Event Subscriptions by Severity

ppreenja — Sun, 15 Nov 2020 12:28:07 GMT

Hi Scott,

We already have a feature request raised for the same, however, there is no ETA for the same:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr52344

Cheers,

Pratham