Administration Guide › Event Collection Profiles Tasks › Apply Suppression and Summarization Rules

Apply Suppression and Summarization Rules

You can apply both suppression and summarization rules to an event profile. When the event profile is deployed, the suppression and summarization rules you select are applied at the agent level. The suppression and summarization check is in addition to the suppression and summarization check made at the event log store.

Important! Create and use suppression rules cautiously because they prevent the logging and the appearance of certain native events entirely. We recommend testing suppression rules in a test environment before deploying them.

To apply suppression and summarization rules

1. Open the event profile wizard and advance to the Suppression Rules step, or the Summarization Rules step.
2. (Optional) Type in the rules pattern entry field to search the available rules. As you type, the rules that match your entry are displayed.
3. Select the rules you want, using the shuttle control.
4. Click the appropriate arrow to advance to the wizard step you want to complete next, or click Save and Close.

   If you click Save and Close, the new profile appears in the user folder list, otherwise the step you select appears.