Perform certain tasks daily, weekly, and monthly to make sure that your systems are protected and Application Control is working efficiently.
Frequency | Recommended tasks |
|---|
Daily | Review the health monitoring dashboard. Review and manage Policy Discovery requests. Review the Policy Discovery page to make sure that observation throttling isn't initiated.
|
Weekly | Review and manage events. Run the Non Compliant Solidcore Agents query to identify systems in the enterprise that are not compliant. Apply filters to suppress unneeded or irrelevant events. Optionally, pull inventory for systems where throttling is reset. Review and manage inventory for endpoints.
|
Monthly | Application Control allows you to run queries that report on events data from multiple ePO - On-prem databases. If you are using a distributed ePO - On-prem environment, periodically collect data for a consolidated report. To regularly collect event data, you can schedule and run the Roll Up Data server task. When running the task, you can optionally purge data. In addition to collating data on a centralized server, you can drop events from other ePO - On-prem servers. Use the Solidcore: Purge server task to purge data. Routinely purge data for inventory, events, client task logs, alerts, and observations. We recommend that you purge: Based on your compliance requirements, you might choose to retain data older than three months. To understand implications of retaining older data on database requirements, see Determining database sizing.
Solidcore: Auto Purge Policy Discovery Requests server task is configured to automatically delete requests older than 3 months. This is an internal task that runs weekly by default. If needed, edit this task to change the configuration. Periodically delete Server Task Logs by running the Purge Server Task Log server task. Delete data older than 6 months.
|