topic Re: Endpoint Logging - Events in Endpoint https://community.checkpoint.com/t5/Endpoint/Endpoint-Logging-Events/m-p/16166#M359 <HTML><HEAD></HEAD><BODY><P>Try using SmartLog and filtering results using the input below.</P><P></P><P>Blade:Anti-Malware&nbsp; NOT "Scan Start" NOT "Scan Stop" NOT Update.</P><P></P><P>That should just give you any threats found by the Anti-Malware Blade.</P><P></P><P><IMG class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/76391_pastedImage_1.png" /></P></BODY></HTML> Fri, 14 Dec 2018 13:39:08 GMT Steve_Lander 2018-12-14T13:39:08Z Endpoint Logging - Events https://community.checkpoint.com/t5/Endpoint/Endpoint-Logging-Events/m-p/16165#M358 <HTML><HEAD></HEAD><BODY><P>I am currently trying to see what events are affecting endpoints and i see there is a huge amount of "Scan Stop" events affecting the few users i have. This actually makes looking for important events a tedious task as the field Event Type is not filterable so i cannot take it out. DO you have any idea how i can sort this? I know there was a way to look in the generic fields and filter for "string" but i am unsure.&nbsp;</P><P></P><P><IMG class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/76380_pastedImage_1.png" /></P><P></P><P>As you can see the filtering is not enabled for this Column.&nbsp;</P><P></P><P><IMG class="image-2 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/76381_pastedImage_2.png" /></P><P></P><P>Any ideas ? Or this is the known limitation that you can only use a few of the fields to process and sort logs?!</P></BODY></HTML> Fri, 14 Dec 2018 10:01:11 GMT https://community.checkpoint.com/t5/Endpoint/Endpoint-Logging-Events/m-p/16165#M358 cezar_varlan1 2018-12-14T10:01:11Z Re: Endpoint Logging - Events https://community.checkpoint.com/t5/Endpoint/Endpoint-Logging-Events/m-p/16166#M359 <HTML><HEAD></HEAD><BODY><P>Try using SmartLog and filtering results using the input below.</P><P></P><P>Blade:Anti-Malware&nbsp; NOT "Scan Start" NOT "Scan Stop" NOT Update.</P><P></P><P>That should just give you any threats found by the Anti-Malware Blade.</P><P></P><P><IMG class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/76391_pastedImage_1.png" /></P></BODY></HTML> Fri, 14 Dec 2018 13:39:08 GMT https://community.checkpoint.com/t5/Endpoint/Endpoint-Logging-Events/m-p/16166#M359 Steve_Lander 2018-12-14T13:39:08Z