Select Events to Purge

Use this wizard panel to select the types of events you want to purge from the database. The most common events types are selected by default.

Application Control tab

Purge allowed application events:

Event	Description
Memory protection event	Unauthorized code from outside the local file system was block from executing within an authorized process running in memory.
Application execution granted	An Application Control policy allowed an application to run on an endpoint.

Purge denied application events:

Event	Description
Application execution denied	An Application Control policy prevented an application from running on an endpoint.

Purge Trusted Updater events:

Event	Description
Trusted Updater added file to whitelist	A Trusted Updater policy specified an executable file that is allowed to run on an endpoint.
Trusted Updater action information	Information about actions performed by the Trusted Updater.

Device Control tab

Purge device connection events:

Event	Description
MEDIUM-INSERTED	User inserted a CD/DVD or removable media reader.
DEVICE-ATTACHED	Device was connected to an endpoint. (selected by default)

Purge device denied events:

Event	Description
QUOTA-EXCEEDED	User exceeded the daily copy limit.
READ-DENIED	User attempted to access an unauthorized device. (selected by default)
WRITE-DENIED	User attempted to write a file to a read-only device.
WLAN-BLOCKED	User attempted to connect to a device through WLAN.

Purge file/print shadowing events:

Purging these events will not remove the Full File Shadow files associated with them. Device Control stores the files in <install_dir>\DeviceControl\Shadow and you need to remove them separately.
The <install_dir>can be changed in Tools > Options > Device Control tab > Server shadow directory field.

Event	Description
WRITE-GRANTED	User copied data to an authorized device.
READ-GRANTED	User accessed data on an authorized device.

Purge keylogger events:

Event	Description
KEYLOGGER-DETECTED	A keylogger was detected.
KEYBOARD-DISABLED	User keyboard was disabled because a keylogger may be present.