Endpoint Manager

• Introduction To Comodo Client - Security For Linux
  • Special Features
  • System Requirements
  • Install Comodo Client - Security For Linux
  • Start CCS For Linux
  • Understand CCS Alerts
• The Summary Screen
• Antivirus Tasks - Introduction
  • Run A Scan
  • Update Virus Database
  • Scheduled Scans
  • Quarantined Items
  • Scan Profiles
  • Scanner Settings
    • Real Time Scan
    • Manual Scan
    • Scheduled Scan
    • Exclusions
• More Options - Introduction
  • Preferences
    • Language Settings
    • Log Settings
    • Connection Settings
    • Update Settings
    • External Device Control Settings
  • Manage My Configurations
    • Comodo Preset Configuration
    • Import / Export And Manage Personal Configurations
  • Diagnostics
  • View Antivirus Events
    • Log Viewer Module
      • Antivirus Logs
        • Filter Antivirus Logs
      • Device Control Logs
        • Filter Device Control Logs
      • Alerts Displayed Logs
        • Filter Alerts Displayed Logs
      • Tasks Launched Logs
        • Filter Tasks Launched Logs
      • Configuration Change Logs
        • Filter Configuration Change Logs
  • Browse Support Forums
  • Help
  • About
• Appendix 1 - CCS For Linux How To Tutorials
  • Scan Your Computer For Viruses
  • View Antivirus Events
  • Configure Database Updates
  • Quickly Set Up Security Levels
  • Change CCS Language Settings
  • Run An Instant Antivirus Scan On Selected Items
  • Create A Scheduled Scan
  • Restore Incorrectly Quarantined Item(s)
  • Switch Off Automatic Antivirus Updates
  • Control External Device Accessibility
• About Comodo Security Solutions

Filter Device Control Logs

You can create custom views of all logged events according to the following criteria:

• Name - Show events that involve specific devices

• Identifier - Show events that involve devices with a specifc ID code

• State - Filter events by whether the connection attempt was successful or not

Configure event filters

• Open Comodo Client Security

• Click 'More' > 'View Antivirus Events'

• Click the 'More' button to open the log viewer module

• Select 'Device Control Events' in the left-menu

• Right-click inside the log viewer module and select 'Advanced Filter'

OR

There are 3 types of filter. Each of these can be further refined by selecting or deselecting specific parameters.

• Select a filter criteria and click 'Add'

1. Name: Filter logs based on the label of the device

• Select 'Contains' or 'Does Not Contain' from the second drop-down:

• Contains – Show only events which concern device name you specify.

• Does Not Contain – Inverts your choice. Show all events except those involving the device name you specify. 

• Enter your filter criteria in the text field

2. Identifier: Filter entries based on the device ID of the external device.

• Select 'Contains' or 'Does Not Contain' from the second drop-down:

• Contains - Show only events which concern device ID you specify.

• Does Not Contain - Inverts your choice. Show all events except those involving the device ID you specify.

• Enter the device ID in part or full as your filter criteria in the text field

3. State: Filter events based on whether the device connection attempt was allowed or blocked.

• Select 'Equal' or 'Not Equal' from the drop-down.

• Equal - Show only events that meet the criteria you select.

• Not Equal - Inverts your choice. For example, select 'Not Equal' + 'Allowed' to view every event except those where devices were allowed.

• Now select the state from ‘Allowed’ or ‘Blocked’.