Deleting specific events

You can delete a single event or a range of events on the Event Analysis page. When you delete events they are removed from all PowerSC GUI pages. This action permanently removes the events and cannot be undone.

1. From the main page, select the Reports tab.
   The Reports page opens.
2. Click Event Analysis.
3. To change the endpoint of the report:
   1. Click the ellipsis in the navigation pane that is associated with the Event Analysis report.
   2. Click Change Endpoints. The Select systems for the report window opens.
   3. Expand the groups to view individual endpoints.
   4. Click the button next to the endpoint for which you want to run the report.
   5. Click Save.
4. You can use the following filters to choose which events to display:
   • Urgency. You can select one or more of the following priorities:
     • Low
     • Medium
     • High
   • Event category. You can select one or more of the following categories:
     • Agent connectivity
     • Allow listing
     • Blocklist
     • Compliance
     • Configuration
     • Status change
     • File integrity monitoring
     • Host intrusion
     • Malware
     • Scheduled command failed
     • Patch management
   • Show. You can select one of the following options:
     • Active alerts only
     • Hidden alerts only
     • All alerts
   • Timestamp.

     The events listed for the selected endpoint occurred within the time range specified in the From and To date fields. You can modify the dates to increase or decrease the time range. The list of events is automatically refreshed.

   • Filter by text
5. Select the event or range of events that you want to delete.
6. Click Delete.
7. Confirm the action. This action permanently removes the events and cannot be undone.