Receiving events from Kaspersky Security for Microsoft Exchange Servers

Information about events during the operation of managed applications, such as Kaspersky Endpoint Security for Windows, is transferred from managed devices and registered in the Administration Server database. By default, the events from Kaspersky Security for Microsoft Exchange Servers are not registered in the Administration Server database. If Kaspersky Security for Microsoft Exchange Servers is installed on the managed devices in your organization and you want to receive events from this application, enable the event registration for this application by using the klscflag utility.

To enable the event registration for Kaspersky Security for Microsoft Exchange Servers:

On the Administration Server device, run the Windows command prompt under an account with administrator rights.
Change your current directory to the Kaspersky Security Center installation folder (usually, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center).
Run one of the following commands:
- For the Administration Server installed on a Microsoft failover cluster:
  klscflag.exe --stp cluster -fset -pv klserver -n KLSRV_EVP_ENABLE_HOST_EVENT_BODY_VALIDATION -t d -v 0
- For the Administration Server installed on a Kaspersky failover cluster node:
  klscflag.exe --stp klfoc -fset -pv klserver -n KLSRV_EVP_ENABLE_HOST_EVENT_BODY_VALIDATION -t d -v 0
- For the Administration Server that is not working on a cluster:
  klscflag.exe -fset -pv klserver -n KLSRV_EVP_ENABLE_HOST_EVENT_BODY_VALIDATION -t d -v 0

The event registration for Kaspersky Security for Microsoft Exchange Servers is enabled.

For Kaspersky Security for Microsoft Exchange Servers, you cannot set the storage term for the events or select which events must be saved in the Administration Server repository. You can set the maximum number of events that can be saved in the repository. This setting is applied to the events received from all of the Kaspersky applications.