Managing Log Inspection rules via the Application Console

About Kaspersky Embedded Systems Security for Windows
What's new
Sources of information about Kaspersky Embedded Systems Security for Windows
- Sources for independent retrieval of information
- Discussing Kaspersky applications on the Forum
Kaspersky Embedded Systems Security for Windows
- Distribution kit
- Software and hardware requirements
- Functional requirements and limitations
Installing and removing the application
- About Kaspersky Embedded Systems Security for Windows update
- Migrating settings values of the updated application version
- About Kaspersky Embedded Systems Security for Windows Administration Tools update
- Kaspersky Embedded Systems Security for Windows software component codes for the Windows Installer service
  - Kaspersky Embedded Systems Security for Windows software components
  - "Administration tools" software component
- System changes after Kaspersky Embedded Systems Security for Windows installation
- Kaspersky Embedded Systems Security for Windows processes
- Installation and recovery settings, and Windows Installer command-line options
- Kaspersky Embedded Systems Security for Windows install and uninstall logs
- Installation planning
  - Selecting administration tools
  - Selecting the installation type
- Installing and uninstalling the application using a wizard
- Installing and uninstalling the application from the command line
- Installing and uninstalling the application using Kaspersky Security Center
- Installing and uninstalling via Active Directory group policies
- Checking Kaspersky Embedded Systems Security for Windows functions. Using the EICAR test virus
  - About the EICAR test virus
  - Checking the Real-Time File Protection and On-Demand Scan features
Application interface
Application licensing
- About the End User License Agreement
- About the license
- About license certificate
- About the key
- About the key file
- About activation code
- About data provision
- Activating the application with a key file
- Activating the application with an activation code
- Viewing information about current license
- Functional limitations when the license expires
- Renewing license
- Deleting the key
Working with the Administration Plug-in
- Managing Kaspersky Embedded Systems Security for Windows from Kaspersky Security Center
- Managing application settings
- Creating and configuring policies
- Creating and configuring tasks using Kaspersky Security Center
- Reports in Kaspersky Security Center
Working with the Kaspersky Embedded Systems Security for Windows Console
- About the Kaspersky Embedded Systems Security for Windows Console
- Kaspersky Embedded Systems Security for Windows Console interface
  - Kaspersky Embedded Systems Security for Windows Console window
  - System Tray Icon in the notification area
- Managing Kaspersky Embedded Systems Security for Windows via the Application Console on another device
- Configuring general application settings via the Application Console
- Managing Kaspersky Embedded Systems Security for Windows tasks
- Viewing protection status and Kaspersky Embedded Systems Security for Windows information
Working with the Web Plug-in from Web Console and Cloud Console
- Managing Kaspersky Embedded Systems Security for Windows from Web Console and Cloud Console
- Web Plug-in limitations
- Managing application settings
  - Configuring general application settings in Web Plug-in
  - Configuring Quarantine and Backup settings in Web Plug-in
- Creating and configuring policies
  - Creating a policy
  - Kaspersky Embedded Systems Security for Windows policy settings sections
- Creating and configuring tasks using Kaspersky Security Center
- Reports in Kaspersky Security Center
Compact Diagnostic Interface
- About the Compact Diagnostic Interface
- Reviewing the Kaspersky Embedded Systems Security for Windows status via the Compact Diagnostic Interface
- Reviewing security event statistics
- Reviewing current application activity
- Configuring writing of dump and trace files
Kaspersky Embedded Systems Security for Windows database and software modules update
- About Update tasks
- About Software Modules Update
- About Database Update
- Kaspersky Embedded Systems Security for Windows database and software modules updating schemes
- Configuring Update tasks
- Rolling back Kaspersky Embedded Systems Security for Windows database updates
- Rolling back application module updates
- Update task statistics
Isolating objects and copying backups
- Isolating probably infected objects. Quarantine
- Making backup copies of objects. Backup
- Blocking access to network resources. Blocked network sessions
Event registration. Kaspersky Embedded Systems Security for Windows logs
- Ways to register Kaspersky Embedded Systems Security for Windows events
- System audit log
- Task logs
- Security log
- Viewing the event log of Kaspersky Embedded Systems Security for Windows in Event Viewer
- Configuring log settings via the Application Console
  - About SIEM integration
  - Configuring SIEM integration settings
- Configuring logs and notifications settings via the Administration Plug-in
Notification settings
- Administrator and user notification methods
- Configuring administrator and user notifications
Starting and stopping Kaspersky Embedded Systems Security for Windows
- Starting the Kaspersky Embedded Systems Security for Windows Administration Plug-in
- Starting the Kaspersky Embedded Systems Security for Windows Console from the Start menu
- Starting and stopping the Kaspersky Security Service
- Starting Kaspersky Embedded Systems Security for Windows components in the operating system safe mode
  - About Kaspersky Embedded Systems Security for Windows working in the operating system safe mode
  - Starting Kaspersky Embedded Systems Security for Windows in safe mode
Kaspersky Embedded Systems Security for Windows self-defense
- About Kaspersky Embedded Systems Security for Windows self-defense
- Protection from changes to folders with installed Kaspersky Embedded Systems Security for Windows components
- Protection from changes to Kaspersky Embedded Systems Security for Windows registry keys
- Registering Kaspersky Security as a protected service
- Managing access permissions for Kaspersky Embedded Systems Security for Windows functions
Real-Time File Protection
- About the Real-Time File Protection task
- About the task protection scope and security settings
- About virtual protection scopes
- Predefined protection scopes
- About predefined security levels
- File extensions scanned by default in the Real-Time File Protection task
- Default Real-Time File Protection task settings
- Managing the Real-Time File Protection task via the Administration Plug-in
- Managing the Real-Time File Protection task via the Application Console
- Managing Real-Time File Protection task via the Web Plug-in
  - Configuring Real-Time File Protection task
  - Configuring the task protection scope
KSN Usage
- About the KSN Usage task
- Default KSN Usage task settings
- Managing KSN Usage via the Administration Plug-In
  - Configuring KSN Usage task
  - Configuring Data Processing
- Managing KSN Usage via the Application Console
  - Configuring KSN Usage task
  - Configuring Data Processing
- Managing KSN Usage via the Web Plug-in
- Configuring additional data transfer
- KSN Usage task statistics
Network Threat Protection
- About the Network Threat Protection task
- Default Network Threat Protection task settings
- Configuring the Network Threat Protection task via the Application Console
  - General task settings
  - Adding exclusions
- Configuring the Network Threat Protection task via the Administration Plug-in
  - General task settings
  - Adding exclusions
- Configuring the Network Threat Protection task via the Web Plug-in
  - General task settings
  - Adding exclusions
Applications Launch Control
- About the Applications Launch Control task
- About Applications Launch Control rules
- About Software Distribution Control
- About KSN usage for the Applications Launch Control task
- About the Rule Generator for Applications Launch Control
- Default Applications Launch Control task settings
- Managing Applications Launch Control via the Administration Plug-in
- Managing Applications Launch Control via the Application Console
- Managing Applications Launch Control via the Web Plug-in
Device Control
- About Device Control task
- About Device Control rules
- Default Device Control task settings
- Managing Device Control via the Administration Plug-in
- Managing Device Control via the Application Console
- Managing Device Control via the Web Plug-in
Firewall Management
- About the Firewall Management task
- About Firewall rules
- Default Firewall Management task settings
- Configuring the Firewall Management task using the Administration Plug-in
- Configuring the Firewall Management task using the Application Console
- Configuring the Firewall Management task using the Web Plug-in
File Integrity Monitor
- About the File Integrity Monitor task
- About file operations monitoring rules
- Default File Integrity Monitor task settings
- Manage File Integrity Monitor via the Administration Plug-in
- Manage File Integrity Monitor via the Application Console
- Manage File Integrity Monitor via the Web Plug-in
AMSI Scanner
- About the AMSI Scanner task
- Default AMSI Scanner task settings
- Configuring AMSI Scanner task settings via the Administration Plug-in
- Configuring AMSI Scanner task settings via the Application Console
- Configuring AMSI Scanner task settings via the Web Plug-in
- AMSI Scanner task statistics
Registry Access Monitor
- About the Registry Access Monitor task
- About the registry access monitoring rules
- Default Registry Access Monitor task settings
- Managing the Registry Access Monitor via the Administration Plug-in
- Managing the Registry Access Monitor task via the Application Console
- Managing the Registry Access Monitor via the Web Plug-in
Log Inspection
- About the Log Inspection task
- Default Log Inspection task settings
- Managing Log Inspection rules via the Administration Plug-in
  - Configuring predefined task rules
  - Adding Log Inspection rules via the Administration Plug-in
- Managing Log Inspection rules via the Application Console
  - Configuring predefined task rules
  - Adding Log Inspection rules via the Application Console
- Managing Log Inspection rules via the Web Plug-in
On-Demand Scan
- About On-Demand Scan tasks
- About the task scan scope and security settings
- Predefined scan scopes
- Online storage file scanning
- About predefined security levels
- Removable Drives Scan
- About the Baseline File Integrity Monitor task
- Enabling start of On-Demand Scan task from context menu
- Default On-Demand Scan tasks settings
- Managing On-Demand Scan tasks via the Administration Plug-in
- Managing On-Demand Scan tasks via the Application Console
- Managing On-Demand Scan tasks via the Web Plug-in
Trusted zone
- About the Trusted Zone
- Configuring Trusted Zone settings via the Administration Plug-in
- Configuring the Trusted Zone via the Application Console
- Configuring the Trusted Zone via the Web Plug-in
Exploit Prevention
- About Exploit Prevention
- Managing Exploit Prevention via the Administration Plug-in
- Managing Exploit Prevention via the Application Console
- Managing Exploit Prevention via the Web Plug-in
  - Configuring process memory protection settings
  - Adding a process to the protection scope
- Exploit prevention techniques
Integrating with third-party systems
- Performance counters for System Monitor
- Kaspersky Embedded Systems Security for Windows SNMP counters and traps
- Integrating with WMI
Working with Kaspersky Embedded Systems Security for Windows from the command line
- Commands
- Command return codes
Contacting Technical Support
- How to get technical support
- Technical Support via Kaspersky CompanyAccount
- Using trace files and AVZ scripts
Glossary
- Active key
- Administration Server
- Anti-virus databases
- Archive
- Backup
- Disinfection
- Event importance
- False positive
- File mask
- Heuristic analyzer
- Infectable file
- Infected object
- Kaspersky Security Network (KSN)
- License term
- Local task
- OLE object
- Policy
- Protection state
- Quarantine
- Security level
- SIEM
- Startup objects
- Task
- Task settings
- Update
- Vulnerability
Information about third-party code
Trademark notices

Log Inspection > Managing Log Inspection rules via the Application Console

Managing Log Inspection rules via the Application Console

In this section, learn how to add and configure Log Inspection rules via the Application Console.

In this section

Configuring predefined task rules

Adding Log Inspection rules via the Application Console

Article ID: 180798, Last review: Oct 4, 2024

Page top