Symantec 10521146 Administration Guide - Page 118

118 Protection policies Adjusting the view of event types 1. Set search parameters to select event types that match certain characteristics. 2. Click Logged and/or Blocked to display event types that have logging or blocking rules. 3. Click Search Events to display a manageable subset of event types. To adjust the view by searching for specific characteristics 1 In the Policies tab, do one of the following: ■ Click New > Search Events. ■ Select a policy, and click View > Search Events. ■ Select a policy, and click Edit > Search Events. 2 Provide some or all of the following search criteria: ■ In Event Name, enter a name. ■ In Protocol, select a protocol from the pull-down list. ■ In Category, select a category from the pull-down list. ■ In Severity, set a severity level from the pull-down list. ■ In Confidence, set a confidence level from the pull-down list. ■ In Intent, select an intention from the pull-down list. ■ In Blocked, specify whether you want to view events with blocking rules. ■ In Logged, specify whether you want to view events with logging rules. ■ In Note, specify the contents of the Note to search for events containing the specified contents. 3 Click Search Events. Search Results displays the total number of items shown in the subset. 4 Click OK to save and exit. Note: Remember that the policy still contains the full list of event types. This search has provided a shorter, more manageable subset to view.