Events

Once an endpoint has been discovered and is being monitored, certain changes in its state or behavior will be logged by Plixer Endpoint Analytics as events, which can also be used to alert network and security operations.

By default, events will be delivered to the web interface and can be viewed in the Recent Events dashboard widget or the View Endpoint Events page under the Endpoints menu group, but they can also be configured for delivery to internal or external syslog servers.

The Configuration > Events submenu allows events to be configured to suit a wide range of usage scenarios.

• Event types
  • New endpoint
  • Profile change (entering)
  • Profile change (exiting)
  • Alarm profile
  • Profile consistency
• Adding events
• Delivering events to syslog
  • Event delivery to internal syslog
  • Event delivery to external syslog
  • syslog event format
• Managing events