Creating a selection of computers based on the presence or properties of Endpoint Sensors components

To create a selection of computers based on the properties of Endpoint Sensors components or the presence of Endpoint Sensors components on the computers:

1. Open the KSC Console.
2. Select the relevant Administration Server.
3. In the KSC console tree, in the section for selecting devices, create a new selection.
4. In the properties of the selection, add the condition created by default.
5. Open the properties of the new condition.
6. Use tags to add to the default condition according to the desired result. You can also move to other sections for additional actions to search for necessary information on Endpoint Sensors components.

   For example, if you want to receive a list of computers on which the Endpoint Sensors component is stopped, in the component status section add the regular expression KATA:server address* and the Stopped status of the Endpoint Sensors component to the default condition.

   Settings for creating a selection of computers with the Endpoint Sensors component

   List of computers on which...	Regular expression	Necessary action	Additional actions
   …the Endpoint Sensors component is installed.	KATA:*	Include	No value.
   …the Endpoint Sensors component is not installed.	KATA:*	Exclude	No value.
   …the Endpoint Sensors component is installed and configured to connect with any Central Node component.	KATA:server address*	Include	No value.
   …the Endpoint Sensors component is installed and configured to connect with a specific Central Node component.	KATA:server address:<server name>:443	Include	No value.
   …a specific version of the Endpoint Sensors component is installed.	No value	No value	In the new condition, in the section with the names of applications, select the Endpoint Sensors component and specify the version number.
   …the Endpoint Sensors component is installed as part of a specific version of KES.	KATA:agent version:<version number>	Include	No value.
   …KES is installed but Endpoint Sensors is not part of KES.	KATA:*	Exclude	In the section with the names of applications, select Kaspersky Endpoint Security.
   …the Endpoint Sensors component is installed as part of KES, but is not enabled.	KATA:agent version*	Include	No value.
   	KATA:server address*	Exclude	No value.
   …the Endpoint Sensors component is stopped.	KATA:server address*	Include	In the component status section, add the following status of the Endpoint Sensors component to the condition: Stopped.
   …the Endpoint Sensors component is installed but there is no connection with the Central Node component.	No value	No value	In the component status section, add the following status of the Endpoint Sensors component to the condition: Connection to server is failed.
   			In the component status section, add the following status of Kaspersky Endpoint Security 11 to the condition: Connection to server is failed.
   …the Endpoint Sensors component is installed but is not performing tasks.	No value	No value	In the component status section, add the following status of the Endpoint Sensors component to the condition: Tasks don’t work.
   			In the component status section, add the following status of Kaspersky Endpoint Security to the condition: Tasks don’t work.
   …Self-Defense of the Endpoint Sensors component is disabled.	No value	No value	In the component status description section, select the following value for the Endpoint Sensors component status: Self-defense is off.

See also Receiving data from the Endpoint Sensors component in the Kaspersky Security Center Administration Console Receiving data on the status of the Endpoint Sensors component on a specific computer

Page top