Respuestas automaticas ePO - Automatic Responses.

[nico_]

Necesito realizar una respuesta automatica desde ePO que detecte la ejecucion de al menos 2 equipos EN UN MISMO EQUIPO (sin especificar el equipo, es decir, si tengo un parque de 10 equipos, que en cualquiera de esos 10 ocurran 2 eventos) en 5 minutos.

La respuesta automatica debe enviar un alerta por correo de lo sucedido. Hasta ahora no logre realizar la parte de que las detecciones sean en un equipo del parque...

Puede hacerse esto?

[bodysoda]

@nico_ , what are you trying to detect? Can you give bit more details? 

[nico_]

I want to send a notification when ePO detects 2 events of access protection in five minutes IN THE SAME SYSTEM...

Actually I have the next agregattion:

Trigger this response if multiple events occur within: 5 min.
When the number of events is at least: 2

Group aggregated events by: Target event MAC Adress

this not work like i want... this send two mails with one event... whitout the group by MAC Adress...

[cdinet]

Try setting it up like this to see if it gives you what you want.

[cdinet]

or rather....

[nico_]

that is how i have it. The result is two emails from the ePO console, but the target MacAdress is not the same

[nico_]

instead of "source", I have "target"

[cdinet]

What happens if you choose source instead of target?

[nico_]

The same. I choose the target mac adress because i need a unique feature of the system... i could choose source mac adress, target, ip, host name, etc. In all the cases, the automatic responses did not function correcly.

The real question is: is it possible to do what I am looking for?

[cdinet]

Let me test it some, it might take a day or 2.