Build query that returns the details of completed AV scan or have email sent

[JoshEPO]

Hello, 

I am looking to either build a query that can return the information of a completed AV scan or simply have a email generated when the scan is complete along with the details (action taken etc.)? I cannot quite seem to figure it out. Future state I am hoping to the utilize the API to not have to do this manually.

Thank you,

Josh

[NagendraPrabu]

Hello Josh,

Thanks for writing in!

In EPO queries and reports, we have option to run multiple queries for AV scan. For ex (type scan or on-demand in search) you will get multiple queries.

Once you choose which scan report you would like to query, please follow the below to get it in email

1. Go to server tasks
2. New task
3. Name the Query
4. From Actions tab --> Select Run Query
5. From Query tab --> Choose the Query
6. Under sub actions you can email it to various recipients on a schedule.

Was my reply helpful? If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a solution" if this reply resolves your query!

[Gyanaranjanp]

Hi @JoshEPO ,

You may use below link to create a query for AV scan complete details.
https://kc.mcafee.com/corporate/index?page=content&id=KB69428

Once you build a query then create a Email alert under server setting link with created query.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[Former Member]

Hello,

Thanks for your post.

If you are looking for the On Demand Scan (ODS) in that case we have a well defined KB article with the complete steps ,

https://kc.mcafee.com/corporate/index?page=content&id=KB69428 

For others AV we have defined by default queries and reports in the ePO which you can duplicate it and edit it as per your requirements and check whether that is running successfully or not and you are getting the correct output or not.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!