Managing Log Inspection rules via the Administration Plug-in

About Kaspersky Security for Windows Server
What's new
Sources of information about Kaspersky Security for Windows Server
- Sources for independent retrieval of information
- Discussing Kaspersky applications in the community
Kaspersky Security for Windows Server
- Distribution kit
- Hardware and software requirements
- Functional requirements and limitations
Kaspersky Endpoint Agent
Installing and removing the application
- Kaspersky Security for Windows Server software component codes for the Windows Installer service
  - Kaspersky Security for Windows Server software components
  - "Administration tools" software component
- System changes after Kaspersky Security for Windows Server installation
- Kaspersky Security for Windows Server processes
- Installation and uninstallation settings and command line options for the Windows Installer service
- Kaspersky Security for Windows Server install and uninstall logs
- Installation planning
  - Selecting administration tools
  - Selecting the installation type
- Installing and uninstalling the application using a wizard
- Installing and uninstalling the application from the command line
- Installing and uninstalling the application using Kaspersky Security Center
- Installing and uninstalling via Active Directory group policies
- Checking Kaspersky Security for Windows Server functions. Using the EICAR test virus
  - About the EICAR test virus
  - Checking the Real-Time File Protection and On-Demand Scan features
Application interface
Application licensing
- About the End User License Agreement
- About the license
- About license certificate
- About the key
- About the key file
- About activation code
- About subscription
- About data provision
- About activating the application through Cloud Console
- Activating the application with a key file
- Activating the application with an activation code
- Viewing information about the current license
- Functional limitations when the license expires
- Renewing the license
- Deleting the key
Working with the Administration Plug-in
- Managing Kaspersky Security for Windows Server from Kaspersky Security Center
- Managing application settings
- Creating and configuring policies
- Creating and configuring tasks using Kaspersky Security Center
- Reports in Kaspersky Security Center
Working with the Kaspersky Security for Windows Server Console
- About the Kaspersky Security for Windows Server Console
- Kaspersky Security for Windows Server Console interface
  - Kaspersky Security for Windows Server Console window
  - System Tray Icon in the notification area
- Managing Kaspersky Security for Windows Server via the Application Console on another device
- Configuring general application settings via the Application Console
- Managing Kaspersky Security for Windows Server tasks
- Viewing the protection status and Kaspersky Security for Windows Server information
Working with the Web Plug-in from Web Console and Cloud Console
- Managing Kaspersky Security for Windows Server from Web Console and Cloud Console
- Web Plug-in limitations
- Managing application settings
  - Configuring general application settings in Web Plug-in
  - Configuring Quarantine and Backup settings in Web Plug-in
- Creating and configuring policies
  - Creating a policy
  - Kaspersky Security for Windows Server policy settings sections
- Creating and configuring tasks using Kaspersky Security Center
- Reports in Kaspersky Security Center
Compact Diagnostic Interface
- About the Compact Diagnostic Interface
- Reviewing the Kaspersky Security for Windows Server status via the Compact Diagnostic Interface
- Reviewing security event statistics
- Reviewing current application activity
- Configuring writing of dump and trace files
Updating Kaspersky Security for Windows Server databases and software modules
- About Update tasks
- About Software Modules Update
- About Databases Update
- Schemes for updating anti-virus application databases and modules used within an organization
- Configuring Update tasks
- Rolling back Kaspersky Security for Windows Server database updates
- Rolling back application module updates
- Update task statistics
Isolating objects and copying backups
- Isolating probably infected objects. Quarantine
- Making backup copies of objects. Backup
- Blocking access to network resources. Blocked Hosts
Event registration. Kaspersky Security for Windows Server logs
- Ways to register Kaspersky Security for Windows Server events
- System audit log
- Task logs
- Security log
- Viewing the event log of Kaspersky Security for Windows Server in Event Viewer
- Configuring log settings in Administration Plug-in
  - About SIEM integration
  - Configuring SIEM integration settings
- Configuring logs and notifications
Notification settings
- Administrator and user notification methods
- Configuring administrator and user notifications
Starting and stopping Kaspersky Security for Windows Server
- Starting the Kaspersky Security for Windows Server Administration Plug-in
- Starting the Kaspersky Security for Windows Server Console from the Start menu
- Starting and stopping the Kaspersky Security Service
- Starting Kaspersky Security for Windows Server components in the operating system safe mode
  - About Kaspersky Security for Windows Server working in the operating system safe mode
  - Starting Kaspersky Security for Windows Server in safe mode
Kaspersky Security for Windows Server self-defense
- About Kaspersky Security for Windows Server self-defense
- Protection from changes to folders with installed Kaspersky Security for Windows Server components
- Protection from changes to Kaspersky Security for Windows Server registry keys
- Registering the Kaspersky Security Service as a protected service
- Managing access permissions for Kaspersky Security for Windows Server functions
Real-Time File Protection
- About the Real-Time File Protection task
- About the task protection scope and security settings
- About virtual protection scopes
- Predefined protection scopes
- About predefined security levels
- File extensions scanned by default in the Real-Time File Protection task
- Default Real-Time File Protection task settings
- Managing the Real-Time File Protection task via the Administration Plug-in
- Managing Real-Time File Protection task via the Application Console
- Managing Real-Time File Protection task via the Web Plug-in
  - Configuring Real-Time File Protection task
  - Configuring the task protection scope
Script Monitoring
- About the Script Monitoring task
- Default Script Monitoring task settings
- Configuring Script Monitoring task settings
- Configuring Script Monitoring task settings via the Application Console
- Configuring Script Monitoring task settings via the Web Plug-in
- Script Monitoring task statistics
KSN Usage
- About the KSN Usage task
- Default KSN Usage task settings
- Managing KSN Usage via the Administration Plug-In
  - Configuring the KSN Usage task
  - Configuring data handling
- Managing KSN Usage via the Application Console
  - Configuring KSN Usage task
  - Configuring Data handling
- Managing KSN Usage via the Web Plug-in
- Configuring additional data transfer
- KSN Usage task statistics
Network Threat Protection
- About the Network Threat Protection task
- Default Network Threat Protection task settings
- Configuring the Network Threat Protection task via the Application Console
  - General task settings
  - Adding exclusions
- Configuring the Network Threat Protection task via the Administration Plug-in
  - General task settings
  - Adding exclusions
- Configuring the Network Threat Protection task via the Web Plug-in
  - General task settings
  - Adding exclusions
Traffic Security
- About the Traffic Security task
- About Traffic Security rules
- Mail threat protection
- List of categories
- Predefined protection level settings
- Default Traffic Security task settings
- Managing Traffic Security via the Administration Plug-in
- Managing Traffic Security via the Application Console
- Managing Traffic Security via the Web Plug-in
Anti-Cryptor
- About the Anti-Cryptor task
- Anti-Cryptor task statistics
- Default Anti-Cryptor task settings
- Configuring the Anti-Cryptor task via the Administration Plug-in
- Configuring the Anti-Cryptor task via the Application Console
- Configuring the Anti-Cryptor task via the Web Plug-in
Applications Launch Control
- About the Applications Launch Control task
- About Applications Launch Control rules
- About Software Distribution Control
- About KSN usage for the Applications Launch Control task
- About Applications Launch Control rules generation
- Default Applications Launch Control task settings
- Managing Applications Launch Control via the Administration Plug-in
- Managing Applications Launch Control via the Application Console
- Managing Applications Launch Control via the Web Plug-in
Device Control
- About Device Control task
- About Device Control rules
- About Device Control rules generation
- About Rule Generator for Device Control task
- Device Control default task settings
- Managing Device Control via the Administration Plug-in
- Managing Device Control via the Application Console
- Managing Device Control via the Application Console Web Plug-in
Firewall Management
- About the Firewall Management task
- About Firewall rules
- Default Firewall Management task settings
- Managing Firewall rules via the Administration Plug-in
- Managing Firewall rules via the Application Console
- Managing Firewall rules via the Web Plug-in
File Integrity Monitor
- About the File Integrity Monitor task
- About file operation monitoring rules
- Default File Integrity Monitor task settings
- Managing File Integrity Monitor via the Administration Plug-in
  - Configuring the File Integrity Monitor task
  - Configuring monitoring rules
- Managing File Integrity Monitor via the Application Console
  - Configuring File Integrity Monitor task settings
  - Configuring monitoring rules
- Managing File Integrity Monitor via the Web Plug-in
  - Configuring the File Integrity Monitor task
  - Configuring monitoring rules
Log Inspection
- About the Log Inspection task
- Default Log Inspection task settings
- Managing Log Inspection rules via the Administration Plug-in
  - Configuring predefined task rules
  - Adding Log Inspection rules via the Administration Plug-in
- Managing Log Inspection rules via the Application Console
  - Configuring predefined task rules
  - Adding Log Inspection rules via the Application Console
- Managing Log Inspection rules via the Web Plug-in
On-Demand Scan
- About On-Demand Scan tasks
- About the task scan scope and security settings
- Predefined scan scopes
- Online storage file scanning
- About predefined security levels
- About the Removable Drives Scan
- About the Baseline File Integrity Monitor task
- Enabling start of On-Demand Scan task from context menu
- Default On-Demand Scan tasks settings
- Managing On-Demand Scan tasks via the Administration Plug-in
- Managing On-Demand Scan tasks via the Application Console
- Managing On-Demand Scan tasks via the Web Plug-in
Trusted Zone
- About the Trusted Zone
- Managing the Trusted Zone via the Administration Plug-in
  - Navigation
    - Opening the Trusted Zone policy settings
    - Opening the Trusted Zone properties window
  - Configuring Trusted Zone settings via the Administration Plug-in
- Managing the Trusted Zone via the Application Console
  - Applying the Trusted Zone to tasks in the Application Console
  - Configuring Trusted Zone settings in the Application Console
- Managing the Trusted Zone via the Web Plug-in
Exploit Prevention
- About Exploit Prevention
- Managing Exploit Prevention via the Administration Plug-in
- Managing Exploit Prevention via the Application Console
- Managing Exploit Prevention via the Web Plug-in
  - Configuring process memory protection settings
  - Adding a process to the protection scope
- Exploit prevention techniques
Hierarchical storage management
- About hierarchical storage
- Configuring HSM system settings via the Administration Plug-in
- Configuring HSM system settings via the Application Console
- Configuring HSM system settings via the Web Plug-in
Network Attached Storage Protection
- Integrating Kaspersky Security for Windows Server with network attached storages
  - Configuring inbound and outbound connections in Windows firewall
  - Configuring security settings of local policies in the local group policy editor
- Working with the Kaspersky Security for Windows Server Console
- Protecting EMC network attached storages of the Celerra / VNX group
  - About protection of EMC network attached storages of the Celerra / VNX group
  - Integrating Kaspersky Security for Windows Server with an EMC network attached storage of the Celerra / VNX group
- RPC Network Storage Protection
- ICAP Network Storage Protection
- Anti-Cryptor for NetApp
- Managing Network Attached Storage Protection tasks from Kaspersky Security Center
Integrating with third-party systems
- Performance counters for System Monitor
- Kaspersky Security for Windows Server SNMP counters and traps
- Integrating with WMI
Working with Kaspersky Security for Windows Server from the command line
- Commands
- Command return codes
Contacting Technical Support
- How to get technical support
- Technical Support via Kaspersky CompanyAccount
- Using trace files and AVZ scripts
- Providing extended diagnostic information to the Technical Support specialists
Glossary
- Active key
- Administration Server
- Anti-virus databases
- Archive
- Backup
- Disinfection
- Event severity
- False positive
- File mask
- Heuristic analyzer
- Infectable file
- Infected object
- Kaspersky Security Network (KSN)
- License term
- Local task
- OLE object
- Policy
- Protection status
- Quarantine
- Real-time protection
- Security level
- SIEM
- Startup objects
- Task
- Task settings
- Update
- Vulnerability
Information about third-party code
Trademark notices

Log Inspection > Managing Log Inspection rules via the Administration Plug-in

Managing Log Inspection rules via the Administration Plug-in

In this section, learn how to add and configure Log Inspection rules via the Administration Plug-in.

In this section

Configuring predefined task rules

Adding Log Inspection rules via the Administration Plug-in

Article ID: 180799, Last review: May 25, 2022

Page top