Queries and Reports Flashcards
What are queries?
A way to poll McAfee ePO data, and return the information gathered in the form of charts and tables
What can you do with the results that are returned from queries?
Query results that are displayed in a table can be acted upon. An example would be applying tags to them
What formats can query results be exported to?
CSV - For use in a spreadsheet
XML - For use in scripts or applications
HTML - View the exported results in a browser
PDF - Save the exported results to read or print later
How can queries be shared between servers?
Queries can be exported from a source server and imported to a destination server
T/F: Queries can only return data from the ePO server database
False, Queries can retrieve data from any registered server, including databases external to ePO
What are the different sections of the Query Builder and what are their functions?
Result Type - This selection identifies from where and what type of data the query retrieves, and determines the available selections from the rest of the wizard
Chart Types - provides several charts and tables to display the data it retrieves. These charts and their drill-down tables are highly configurable
Table Columns - Specify columns for table (if you select a type of chart rather than a table, this will configure the drill down table)
Filters - Specify criteria by selecting properties and operators to limit the data retrieved by the query
What are the different types of groups that queries can be saved in?
Private - Only viewable by the creator
Public - Adds the new group under shared groups. Any user with access to public queries and reports can view queries and reports in the group
Shared by permission set - Adds the new group under Shared Groups. Only users assigned the selected permission sets can access reports or queries in this group
McAfee - Default queries provided by McAfee that can’t be deleted or edited, but can be duplicated
How can you automate the running of a query?
You can run a query on a schedule using a server task. You can also enact a subaction or actions on the results that are yielded from the query, such as emailing the query results or working with tags
What are reports?
Package query results into a pdf document, enabling offline analysis.
What would be a good reason to utilize reports?
Share information about your network environment with security administrators and other stakeholders
Other than queries, what other elements can be added to reports?
- images
- text
- header/footer
What does the Last Run Result column in the reports table do?
The Last Run Result column allows you to download the most recent successful completion of the respective report. Whenever you choose to run the report again, the freshly run report will be placed into this column, and the previous one will be deleted
Where can you configure global settings for your reports, such as header and footer, and directory for scheduled exports?
The ‘Printing and Exporting’ Server Setting
T/F: Only Queries that display their results in chart, rather than a table, can be used in reports?
False, both Table and Chart result queries can be used
