You can review the requests received from endpoints.
Note
Some fields don't apply to Linux endpoints.
On the ePO - On-prem console, select Menu → Application Control → Policy Discovery to open the Policy Discovery page.
Review the listed requests using one of these methods.
Specific interval — Select an option from the Time Filter list, then click Update Results to view requests received during a specific interval.
Request status — Select a value for the request status from the Approval Status list, then click Update Results to view requests that match the selected status.
Activity — Click Additional filters and select a value from the Activity list. Click Update Results to view requests for a certain activity.
Specific endpoint — Click Additional filters and enter an endpoint name in the System Name field. Click Update Results to view requests received from the endpoint. Make sure that you specify the complete system name because no partial matches are performed.
Multiple criteria — Specify values for the Time Filter, Approval Status, Activity, Final Reputation, and System Name fields, as needed, then click Update Results to perform a search based on the specified criteria.
Specific search string — Enter a search string in the Quick find field for Object Name, Application Name, Certificates, and User Comments, then click Apply to view requests that match the specified search string. Partial matches are performed based on the text you specify.
Sort — Sort the list based on the global prevalence, final reputation, reputation source, execution time, activity, object name, application name, certificate, or user comments by clicking the column heading.
Selected requests — Select requests of interest, then click Show selected rows to review only the selected requests.
(Optional) Add user comments for one or multiple events:
One event – click Add a comment.
Multiple events – select the requests and click Actions → Add Comments, then enter your comments and click OK.
Review individual requests that make up a collated request and detailed information for the file.
Click a row to open the Request Details page.
Review file details, such as name, version, path, parent process, files changed, and user comments, if any.
Review the individual requests that make up the collated request in the Enterprise Level Activity pane.
Click Close.