McAfee EPOCDE-AA-BA Product Guide - Page 292

22 Managing Issues and Tickets Working with issues Use this... To do this... Event • Event group - Select an event group, such as ePO Notification Events. • Event type - Select an event type that is part of the event group, such as Server. Status Enable or disable the response. 2 Click Next. 3 Select properties to narrow the events that trigger the response, then click Next. 4 Next to Aggregation, select one: • Trigger this response for every event - generates a response for every event. • Trigger this response if multiple events occur within - generates a response for multiple events that occur during a specified time period and, if needed, after a certain number of events have occurred or a certain property accumulates a specified number of distinct values. 5 Next to Grouping, select one: • Do not group aggregated events - events of the same type are not aggregated. • Group aggregated events by - a property of the event. For example, if you narrow your events by audit, you can aggregate events that are noncompliant with the audit. 6 Next to Throttling, select the maximum time period that you want this response to occur. 7 Click Next. 8 Select Create issue from the drop-down list, then select the type of issue to create. This choice determines the options that appear on this page. 292 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide