Managing Log Inspection rules via the Application Console

About Kaspersky Security for Windows Server
What's new
Sources of information about Kaspersky Security for Windows Server
- Sources for independent retrieval of information
- Discussing Kaspersky applications in the community
Kaspersky Security for Windows Server
- Distribution kit
- Hardware and software requirements
- Functional requirements and limitations
Kaspersky Endpoint Agent
Installing and removing the application
- Kaspersky Security for Windows Server software component codes for the Windows Installer service
  - Kaspersky Security for Windows Server software components
  - "Administration tools" software component
- System changes after Kaspersky Security for Windows Server installation
- Kaspersky Security for Windows Server processes
- Installation and uninstallation settings and command line options for the Windows Installer service
- Kaspersky Security for Windows Server install and uninstall logs
- Installation planning
  - Selecting administration tools
  - Selecting the installation type
- Installing and uninstalling the application using a wizard
- Installing and uninstalling the application from the command line
- Installing and uninstalling the application using Kaspersky Security Center
- Installing and uninstalling via Active Directory group policies
- Checking Kaspersky Security for Windows Server functions. Using the EICAR test virus
  - About the EICAR test virus
  - Checking the Real-Time File Protection and On-Demand Scan features
Application interface
Application licensing
- About the End User License Agreement
- About the license
- About license certificate
- About the key
- About the key file
- About activation code
- About subscription
- About data provision
- About activating the application through Cloud Console
- Activating the application with a key file
- Activating the application with an activation code
- Viewing information about the current license
- Functional limitations when the license expires
- Renewing the license
- Deleting the key
Working with the Administration Plug-in
- Managing Kaspersky Security for Windows Server from Kaspersky Security Center
- Managing application settings
- Creating and configuring policies
- Creating and configuring tasks using Kaspersky Security Center
- Reports in Kaspersky Security Center
Working with the Kaspersky Security for Windows Server Console
- About the Kaspersky Security for Windows Server Console
- Kaspersky Security for Windows Server Console interface
  - Kaspersky Security for Windows Server Console window
  - System Tray Icon in the notification area
- Managing Kaspersky Security for Windows Server via the Application Console on another device
- Configuring general application settings via the Application Console
- Managing Kaspersky Security for Windows Server tasks
- Viewing the protection status and Kaspersky Security for Windows Server information
Working with the Web Plug-in from Web Console and Cloud Console
- Managing Kaspersky Security for Windows Server from Web Console and Cloud Console
- Web Plug-in limitations
- Managing application settings
  - Configuring general application settings in Web Plug-in
  - Configuring Quarantine and Backup settings in Web Plug-in
- Creating and configuring policies
  - Creating a policy
  - Kaspersky Security for Windows Server policy settings sections
- Creating and configuring tasks using Kaspersky Security Center
- Reports in Kaspersky Security Center
Compact Diagnostic Interface
- About the Compact Diagnostic Interface
- Reviewing the Kaspersky Security for Windows Server status via the Compact Diagnostic Interface
- Reviewing security event statistics
- Reviewing current application activity
- Configuring writing of dump and trace files
Updating Kaspersky Security for Windows Server databases and software modules
- About Update tasks
- About Software Modules Update
- About Databases Update
- Schemes for updating anti-virus application databases and modules used within an organization
- Configuring Update tasks
- Rolling back Kaspersky Security for Windows Server database updates
- Rolling back application module updates
- Update task statistics
Isolating objects and copying backups
- Isolating probably infected objects. Quarantine
- Making backup copies of objects. Backup
- Blocking access to network resources. Blocked Hosts
Event registration. Kaspersky Security for Windows Server logs
- Ways to register Kaspersky Security for Windows Server events
- System audit log
- Task logs
- Security log
- Viewing the event log of Kaspersky Security for Windows Server in Event Viewer
- Configuring log settings in Administration Plug-in
  - About SIEM integration
  - Configuring SIEM integration settings
- Configuring logs and notifications
Notification settings
- Administrator and user notification methods
- Configuring administrator and user notifications
Starting and stopping Kaspersky Security for Windows Server
- Starting the Kaspersky Security for Windows Server Administration Plug-in
- Starting the Kaspersky Security for Windows Server Console from the Start menu
- Starting and stopping the Kaspersky Security Service
- Starting Kaspersky Security for Windows Server components in the operating system safe mode
  - About Kaspersky Security for Windows Server working in the operating system safe mode
  - Starting Kaspersky Security for Windows Server in safe mode
Kaspersky Security for Windows Server self-defense
- About Kaspersky Security for Windows Server self-defense
- Protection from changes to folders with installed Kaspersky Security for Windows Server components
- Protection from changes to Kaspersky Security for Windows Server registry keys
- Registering the Kaspersky Security Service as a protected service
- Managing access permissions for Kaspersky Security for Windows Server functions
Real-Time File Protection
- About the Real-Time File Protection task
- About the task protection scope and security settings
- About virtual protection scopes
- Predefined protection scopes
- About predefined security levels
- File extensions scanned by default in the Real-Time File Protection task
- Default Real-Time File Protection task settings
- Managing the Real-Time File Protection task via the Administration Plug-in
- Managing Real-Time File Protection task via the Application Console
- Managing Real-Time File Protection task via the Web Plug-in
  - Configuring Real-Time File Protection task
  - Configuring the task protection scope
Script Monitoring
- About the Script Monitoring task
- Default Script Monitoring task settings
- Configuring Script Monitoring task settings
- Configuring Script Monitoring task settings via the Application Console
- Configuring Script Monitoring task settings via the Web Plug-in
- Script Monitoring task statistics
KSN Usage
- About the KSN Usage task
- Default KSN Usage task settings
- Managing KSN Usage via the Administration Plug-In
  - Configuring the KSN Usage task
  - Configuring data handling
- Managing KSN Usage via the Application Console
  - Configuring KSN Usage task
  - Configuring Data handling
- Managing KSN Usage via the Web Plug-in
- Configuring additional data transfer
- KSN Usage task statistics
Network Threat Protection
- About the Network Threat Protection task
- Default Network Threat Protection task settings
- Configuring the Network Threat Protection task via the Application Console
  - General task settings
  - Adding exclusions
- Configuring the Network Threat Protection task via the Administration Plug-in
  - General task settings
  - Adding exclusions
- Configuring the Network Threat Protection task via the Web Plug-in
  - General task settings
  - Adding exclusions
Traffic Security
- About the Traffic Security task
- About Traffic Security rules
- Mail threat protection
- List of categories
- Predefined protection level settings
- Default Traffic Security task settings
- Managing Traffic Security via the Administration Plug-in
- Managing Traffic Security via the Application Console
- Managing Traffic Security via the Web Plug-in
Anti-Cryptor
- About the Anti-Cryptor task
- Anti-Cryptor task statistics
- Default Anti-Cryptor task settings
- Configuring the Anti-Cryptor task via the Administration Plug-in
- Configuring the Anti-Cryptor task via the Application Console
- Configuring the Anti-Cryptor task via the Web Plug-in
Applications Launch Control
- About the Applications Launch Control task
- About Applications Launch Control rules
- About Software Distribution Control
- About KSN usage for the Applications Launch Control task
- About Applications Launch Control rules generation
- Default Applications Launch Control task settings
- Managing Applications Launch Control via the Administration Plug-in
- Managing Applications Launch Control via the Application Console
- Managing Applications Launch Control via the Web Plug-in
Device Control
- About Device Control task
- About Device Control rules
- About Device Control rules generation
- About Rule Generator for Device Control task
- Device Control default task settings
- Managing Device Control via the Administration Plug-in
- Managing Device Control via the Application Console
- Managing Device Control via the Application Console Web Plug-in
Firewall Management
- About the Firewall Management task
- About Firewall rules
- Default Firewall Management task settings
- Managing Firewall rules via the Administration Plug-in
- Managing Firewall rules via the Application Console
- Managing Firewall rules via the Web Plug-in
File Integrity Monitor
- About the File Integrity Monitor task
- About file operation monitoring rules
- Default File Integrity Monitor task settings
- Managing File Integrity Monitor via the Administration Plug-in
  - Configuring the File Integrity Monitor task
  - Configuring monitoring rules
- Managing File Integrity Monitor via the Application Console
  - Configuring File Integrity Monitor task settings
  - Configuring monitoring rules
- Managing File Integrity Monitor via the Web Plug-in
  - Configuring the File Integrity Monitor task
  - Configuring monitoring rules
Log Inspection
- About the Log Inspection task
- Default Log Inspection task settings
- Managing Log Inspection rules via the Administration Plug-in
  - Configuring predefined task rules
  - Adding Log Inspection rules via the Administration Plug-in
- Managing Log Inspection rules via the Application Console
  - Configuring predefined task rules
  - Adding Log Inspection rules via the Application Console
- Managing Log Inspection rules via the Web Plug-in
On-Demand Scan
- About On-Demand Scan tasks
- About the task scan scope and security settings
- Predefined scan scopes
- Online storage file scanning
- About predefined security levels
- About the Removable Drives Scan
- About the Baseline File Integrity Monitor task
- Enabling start of On-Demand Scan task from context menu
- Default On-Demand Scan tasks settings
- Managing On-Demand Scan tasks via the Administration Plug-in
- Managing On-Demand Scan tasks via the Application Console
- Managing On-Demand Scan tasks via the Web Plug-in
Trusted Zone
- About the Trusted Zone
- Managing the Trusted Zone via the Administration Plug-in
  - Navigation
    - Opening the Trusted Zone policy settings
    - Opening the Trusted Zone properties window
  - Configuring Trusted Zone settings via the Administration Plug-in
- Managing the Trusted Zone via the Application Console
  - Applying the Trusted Zone to tasks in the Application Console
  - Configuring Trusted Zone settings in the Application Console
- Managing the Trusted Zone via the Web Plug-in
Exploit Prevention
- About Exploit Prevention
- Managing Exploit Prevention via the Administration Plug-in
- Managing Exploit Prevention via the Application Console
- Managing Exploit Prevention via the Web Plug-in
  - Configuring process memory protection settings
  - Adding a process to the protection scope
- Exploit prevention techniques
Hierarchical storage management
- About hierarchical storage
- Configuring HSM system settings via the Administration Plug-in
- Configuring HSM system settings via the Application Console
- Configuring HSM system settings via the Web Plug-in
Network Attached Storage Protection
- Integrating Kaspersky Security for Windows Server with network attached storages
  - Configuring inbound and outbound connections in Windows firewall
  - Configuring security settings of local policies in the local group policy editor
- Working with the Kaspersky Security for Windows Server Console
- Protecting EMC network attached storages of the Celerra / VNX group
  - About protection of EMC network attached storages of the Celerra / VNX group
  - Integrating Kaspersky Security for Windows Server with an EMC network attached storage of the Celerra / VNX group
- RPC Network Storage Protection
- ICAP Network Storage Protection
- Anti-Cryptor for NetApp
- Managing Network Attached Storage Protection tasks from Kaspersky Security Center
Integrating with third-party systems
- Performance counters for System Monitor
- Kaspersky Security for Windows Server SNMP counters and traps
- Integrating with WMI
Working with Kaspersky Security for Windows Server from the command line
- Commands
- Command return codes
Contacting Technical Support
- How to get technical support
- Technical Support via Kaspersky CompanyAccount
- Using trace files and AVZ scripts
- Providing extended diagnostic information to the Technical Support specialists
Glossary
- Active key
- Administration Server
- Anti-virus databases
- Archive
- Backup
- Disinfection
- Event severity
- False positive
- File mask
- Heuristic analyzer
- Infectable file
- Infected object
- Kaspersky Security Network (KSN)
- License term
- Local task
- OLE object
- Policy
- Protection status
- Quarantine
- Real-time protection
- Security level
- SIEM
- Startup objects
- Task
- Task settings
- Update
- Vulnerability
Information about third-party code
Trademark notices

Log Inspection > Managing Log Inspection rules via the Application Console

Managing Log Inspection rules via the Application Console

In this section, learn how to add and configure Log Inspection rules via the Application Console.

In this section

Configuring predefined task rules

Adding Log Inspection rules via the Application Console

Article ID: 180798, Last review: May 25, 2022

Page top