Creating a query to count the number of systems cleaned per week is a good way to benchmark the overall status of your network.
For details about product features, usage, and best practices, click ? or Help.
Select Menu → Reporting → Queries & Reports, then click Actions → New.
On the Query Wizard Result Types tab for the Feature Group, select Events, then in the Result Types pane, click Threat Events, then click Next.
On the Chart tab, in the Display Results As list, select Single Line Chart.
In the Configure Chart: Single Line Chart pane, configure these settings, then click Next:
In Time base is, select Event Generated Time.
In Time unit, select Week.
In Time Sequence is, select Oldest First.
In Line values are, select Number of.
Select Threat Target Host Name.
Click Show Total.
In the Columns tab, in the Available Columns list select these columns to display, then click Next:
Event Generated time
Threat Target Host Name
Threat Target IPv4 Address
Event Category
Threat Severity
Threat Name
In the Filter tab, Available Properties list, configure this Required Criteria:
For Event Generated Time, select these settings from the Is within the last list, 3 and Months.
For Event Category, select these settings from the Belongs to list, Malware.
For Action Taken, select these settings from the lists Equals and Deleted.
Click Save to display the Save Query page, then configure these settings:
For Query Name, type a query name, for example,
Total Infected Systems Cleaned Per Week.For Query Description, type a description of what this query does.
For Query Group, click New Group, type the query group name, then click Public.
Click Save.
When you run this query, it returns the number of infected systems cleaned per week. This information provides a benchmark of the overall status of your network.