SCCM reports for SCEP malware short history

Hello,
SCCM reports show only history for the last two month of the malware that was found on the computers. Is there any way to configure how long to keep history of malware records on SCCM?

After a bit more digging around, I believe I found the answer for this.
In SCCM, navigate to Administration>Site Configuration>Sites>. Right click on your primary site and select Site Maintenance. Find the entry for
Delete Aged Threat Data and change the value to what you require.
In my case, I changed the value from 30 to 365. This task cleans out the EP_Malware and EP_MalwarePath SQL tables, which hold the records of detected malware activity for the SCCM clients.

Similar Messages

  • SCCM Report for Applicable and Installed Updates Collection Wise

    Hi All, I was looking for a report on Applicable and Installed Updates Collection Wise and got this below query on the Internet and want to create a SCCM report with this below query. How to make this query working in SCCM report?
    Do I need to add prompts, if yes please guide me on adding prompts.
    SELECT
    DISTINCT
    SYS.Name0
    AS [Server Name], SIS.SMS_Installed_Sites0 AS [Site Code], UCS.Status AS [Patch Status Code],
    CASE WHEN UCS.Status = '2' THEN 'Applicable' WHEN UCS.Status = '3' THEN 'Installed' ELSE '' END AS 'Patch Status', UI.BulletinID AS [Bulletin ID],
    UI
    .ArticleID AS [Article ID], UI.
    Title
    FROM
    v_R_System AS SYS LEFT OUTER
    JOIN
    v_Update_ComplianceStatusAll
    AS UCS ON SYS.ResourceID = UCS.ResourceID INNER
    JOIN
    v_UpdateInfo
    AS UI ON UCS.CI_ID = UI.CI_ID INNER
    JOIN
    v_RA_System_SMSInstalledSites
    AS SIS ON SYS.ResourceID = SIS.
    ResourceID
    WHERE
    (UCS.Status IN ('2', '3')) AND (UI.ArticleID IN ('972270', '974392', '973904', '969947')) AND (SYS.Name0
    IN
    (SELECT DISTINCT v_FullCollectionMembership.
    Name
    FROM v_FullCollectionMembership INNER
    JOIN
    v_R_System
    ON v_R_System.ResourceID = v_FullCollectionMembership.ResourceID AND v_R_System.Active0 = 1 AND
    v_FullCollectionMembership
    .CollectionID IN ('Collection ID'
    ORDER
    BY
    [Patch Status Code]

    Yes it can be done and please run the query which i have shared in the thread
    I again pasted the query for you below..
    SELECT DISTINCT
    SYS.Name0 AS [Server Name], CASE WHEN UCS.Status = '2' THEN 'Applicable' WHEN UCS.Status = '3' THEN 'Installed' ELSE '' END AS 'Patch Status',
    UI.BulletinID AS [Bulletin ID], UI.ArticleID AS [Article ID], UI.Title
    FROM         v_R_System AS SYS LEFT OUTER JOIN
                          v_Update_ComplianceStatusAll
    AS UCS ON SYS.ResourceID = UCS.ResourceID INNER JOIN
                          v_UpdateInfo AS UI ON UCS.CI_ID
    = UI.CI_ID
    WHERE     (UCS.Status IN ('2', '3')) AND (SYS.Name0 IN (SELECT DISTINCT v_FullCollectionMembership.Name
    FROM v_FullCollectionMembership INNER JOIN
         v_R_System ON v_R_System.ResourceID = v_FullCollectionMembership.ResourceID AND v_R_System.Active0 = 1 AND
                                                       v_FullCollectionMembership.CollectionID
    IN ('XXX00000')))
    Kamala kannan.c| Please remember to click “Mark as Answer” or Vote as Helpful if its helpful for you. |Disclaimer: This posting is provided with no warranties and confers no rights

  • SCCM Report for Laptop Battery Condition

    Good morning,
    We are in a situation where we're needing to monitor conditions of laptop batteries in the school district I manage.   I have added the laptop batteries class(Win32_Battery) and have all required/requested information checked under this class.  This
    has been set for a week, so all devices should be inventoried by now.
    How do you recommend my getting a report together that shows battery condition/etc?  The fields I would like to see are ones such as:
    Win32_Battery
    battery status
    design capacity
    design voltage
    Expected Life
    Error Description
    Full Charge Capacity
    Really anything that will help us in knowing which laptops batteries need replacing. 
    I am not that knowledgeable about SQL reporting/SCCM reporting, so any help in getting this is greatly appreciated.  Any resources that you can point me in for getting more familiar with creating my own reports would be greatly appreciated.  I
    don't even know where to begin.
    Thank you!

    Good you have added the class. Please use the following link for the detailed information about Win32_Battery:
    https://msdn.microsoft.com/en-us/library/aa394074(v=vs.85).aspx
    Last Full Charge should guide your decision on replacement.
    Following link will help you as well:
    http://www.helpwithwindows.com/Windows7/Check-your-laptop-battery-health-in-Windows-7.html
    -RG

  • SCCM Report for Pending DP status

    Due to the issue in our sccm  hierarchy , there is problem in DP copying
    We want to pull the report for past one week packages we deployed, that how many of them DP status is Install pending.

    Yes, I know this is an old post, I’m trying to clean them up.
    What wrong with reviewing the built-in called All active package distributions?
    http://www.enhansoft.com/

  • SCCM Report for hard disk mode (IDE/AHCI)

    May I ask you if anyone of you is aware of and has an example on how to create a SCCM report to find out if the hard disk mode is set to IDE or AHCI?
    Many thanks

    Yes, I know this is an old post, I’m trying to clean them up, Did you figure this out, if so how?
    This information is not collected by default and therefore you will need to collect it first before you can report on it.
    http://www.enhansoft.com/

  • SCCM Report for Software Updates that show the required update and its size

    Hello-
    I created multiple windows update deployments, but was looking to view a report that shows me the update name (like the KB and MS) along with the size of the update.
    Does anyone know if there's a pre-made report?  If not, does anyone know of a good query to get this info?
    Thanks!
    Andrew

    Yes, I know this is an old post, I’m just trying to clean them up.
    There is no pre-canned report for this. Yes a report can be written to collect this inform but keep in mind that a SU mind have several versions aka 1 for Winxp, 1 for Vista, 1 for Win2k3, 1 for Win2k3 Sp1, etc. if you are trying aggregate
    the data it will take a bit of fancy SQL/SSRS work to get this done. BTW Getting the size of the KB also take a bit of work.
    http://www.enhansoft.com/

  • Sccm reporting for add/remove programs is not accurate

    Hi freinds
    I have made a custome query to find computers where antivirus is not installed in entire site. It was working fine. But last week I have observed that one windows server 2008 r2 has got symantec enpoint protection installed but sccm report is including
    that server.
    could anyone please share ideas to solve it?
    here is the sccm query:
    select v_r_system.netbios_name0,v_r_system.user_name0,v_GS_OPERATING_SYSTEM.Caption0 AS "Operating System",v_GS_SYSTEM_ENCLOSURE.SerialNumber0 AS "Serial Number" from v_r_system
     join v_GS_OPERATING_SYSTEM on v_GS_OPERATING_SYSTEM.ResourceID = v_r_system.ResourceId
     JOIN v_GS_system on v_GS_system.ResourceID = v_r_system.ResourceId
    JOIN v_GS_system_Enclosure on v_GS_system_Enclosure.ResourceID = v_r_system.ResourceId
    where v_GS_system.Name0 not in
    select distinct v_GS_system.Name0 from  v_GS_system
    LEFT OUTER JOIN v_GS_ADD_REMOVE_PROGRAMS on v_GS_ADD_REMOVE_PROGRAMS.ResourceID = v_r_system.ResourceId
    LEFT OUTER join v_GS_ADD_REMOVE_PROGRAMS_64 on v_GS_ADD_REMOVE_PROGRAMS_64.ResourceID = v_r_system.ResourceId
     where
    v_GS_ADD_REMOVE_PROGRAMS.DisplayName0  = 'Symantec AntiVirus'
    or v_GS_ADD_REMOVE_PROGRAMS.DisplayName0  = 'Symantec AntiVirus Client' or 
    v_GS_ADD_REMOVE_PROGRAMS.DisplayName0  = 'Norton Antivirus Client' or
    v_GS_ADD_REMOVE_PROGRAMS.DisplayName0  = 'Norton AntiVirus Corporate Edition'  or
    v_GS_ADD_REMOVE_PROGRAMS.DisplayName0  = 'Symantec Endpoint Protection'  or
    v_GS_ADD_REMOVE_PROGRAMS_64.DisplayName0  = 'Symantec AntiVirus Win64' or v_GS_ADD_REMOVE_PROGRAMS_64.DisplayName0  = 'Symantec Endpoint Protection' or
    v_GS_SYstem.SMSID0 = 'GUID:6578610F-BFD0-4693-98B5-B6FB50129FB5' or
    v_GS_SYstem.SMSID0 = 'GUID:E64FF1A8-EF5B-46DD-8859-02D7A3E8818A' or
    v_GS_SYstem.SMSID0 = 'GUID:52EA60BD-F3DD-4615-9CCD-AFE0B7F28D41' )

    It sounds like you have some 3rd. party Console tools installed (right click tools). Those are using various scripts to connect to the clients and is not really controlled via ConfigMgr.
    Kent Agerlund | My blogs: blog.coretech.dk/kea and
    SCUG.dk/ | Twitter:
    @Agerlund | Linkedin: Kent Agerlund |
    Mastering ConfigMgr 2012 The Fundamentals

  • Report for Sales Order Change History   CDPOS and CDHDR

    How to take a report of the data for the Sales Order Change history for a particular period of time. It is required to take a report of all the Sales Orders for which the basic price has been changed. Please let me know the procedure. I could not get the data from the table CDPOS and CDHDR
    Helpful answer would be rewarded.
    Regards
    Praveen

    Dear Praveen Kumar
    Have you tried with VBAP where sale order details at item level would be stored.
    Moreover, to my knowledge, there won't be any changes as for as pricing is concerned at sale order level but there is at billing level.  Normally, any price increase / decrease would reflect in billing.  So why dont you to table join through SQVI VBAP (for sale order details) and VBRP (for billing details) so that you can compare the selling price in sale order with billing. 
    Thanks
    G. Lakshmipathi

  • SCCM report for specific exit code

    Can SCCM 2007 report on a specific exit code that is passed to a log file? I'm trying to make the report look for any installs that end in exit code 4 which occurs when a specific logic occurs. 

    No, there's nothing built in to skim log files or report on their contents. You could easily write a script to do this though and populate a custom WMI class instance that ConfigMgr can pick up.
    Jason | http://blog.configmgrftw.com

  • Report for track the assets history only for transfer assets through ABUMN

    Hi experts,
    I am transferring the some value from one asset to another asset through ABUMN, is there any report to see the this kind of transfer assets
    useful answers duly rewarded

    Hi,
    You can view the intra-company transfer report S_ALR_87012054.
    Thanks
    Jagdish

  • Report for PO Change History

    Hi All
    Is there any standard report for getting the change history of PO's?
    Regards.

    Hi U can use this FM.
    ME_CHANGES_READ
    and ME_READ_CHANGES_EINKBELEG
    example
    call function 'ME_CHANGES_READ'
      exporting
        document_category = it_ekko-bstyp
        document_number   = it_ekko-ebeln
        date_of_change    = it_nast-datvr
        time_of_change    = it_nast-uhrvr
      tables
        xcdhdr            = it_cdhdr.
    кu03B1ятu03B9к

  • Report for Employee History

    Hi Friends,
      Is there any standard report for getting the Employee history PA data..
    Thanks and Regards,
    Vadivel

    Hi,
    Check Tcode PAR1 and PAR2.
    Hope this helps.
    Thanks,
    Sarika.

  • Performace Issue using Crystal Report For enterprise and BEx Queries

    Hi all;
        We are generating the following error stack when trying to build a report on top of a BEX query using Crystal Report for Enterprise :
        |7C4F8ECE44034DB897AD88D6F98B028B3|2011 12 12 17:24:21.277|+0100|>>|E| |crj|20380|  56|ModalContext    | |2|0|0|0|BIPSDK.InfoStore:query|CHVXRIL0047:20380:56.174:1|-|-|BIPSDK.InfoStore:query|CHVXRIL0047:20380:56.174:1|Cut2PbOe3UdzgckPBHn8spEab|||||||||com.crystaldecisions.sdk.occa.infostore.internal.InfoObjects||Assertion failed: Java plugin for CommonConnection is not loaded.
    java.lang.AssertionError
         at com.businessobjects.foundation.logging.log4j.Log4jLogger.assertTrue(Log4jLogger.java:52)
         at com.crystaldecisions.sdk.occa.infostore.internal.InfoObjects.newInfoObject(InfoObjects.java:576)
         at com.crystaldecisions.sdk.occa.infostore.internal.InfoObjects.continueUnpackHelper(InfoObjects.java:548)
         at com.crystaldecisions.sdk.occa.infostore.internal.InfoObjects.continueUnpack(InfoObjects.java:489)
         at com.crystaldecisions.sdk.occa.infostore.internal.InfoObjects.startUnpack(InfoObjects.java:464)
         at com.crystaldecisions.sdk.occa.infostore.internal.InternalInfoStore$XRL3WireStrategy.startUnpackTo(InternalInfoStore.java:1484)
         at com.crystaldecisions.sdk.occa.infostore.internal.InternalInfoStore$XRL3WireStrategy.startUnpackTo(InternalInfoStore.java:1464)
         at com.crystaldecisions.sdk.occa.infostore.internal.InternalInfoStore.unpackAll(InternalInfoStore.java:910)
         at com.crystaldecisions.sdk.occa.infostore.internal.InternalInfoStore.queryHelper(InternalInfoStore.java:944)
         at com.crystaldecisions.sdk.occa.infostore.internal.InternalInfoStore.queryHelper(InternalInfoStore.java:929)
         at com.crystaldecisions.sdk.occa.infostore.internal.InternalInfoStore.query_aroundBody24(InternalInfoStore.java:798)
         at com.crystaldecisions.sdk.occa.infostore.internal.InternalInfoStore.query(InternalInfoStore.java:1)
         at com.crystaldecisions.sdk.occa.infostore.internal.InfoStore.query_aroundBody20(InfoStore.java:175)
         at com.crystaldecisions.sdk.occa.infostore.internal.InfoStore.query_aroundBody21$advice(InfoStore.java:42)
         at com.crystaldecisions.sdk.occa.infostore.internal.InfoStore.query(InfoStore.java:1)
         at com.businessobjects.mds.securedconnection.cms.services.olap.OlapCmsSecuredConnectionService.getConnectionObject(OlapCmsSecuredConnectionService.java:125)
         at com.businessobjects.mds.securedconnection.cms.services.olap.OlapCmsSecuredConnectionService.getOlapSecuredConnection(OlapCmsSecuredConnectionService.java:191)
         at com.businessobjects.mds.securedconnection.loader.internal.SecuredConnectionLoaderImpl.getOlapConnectionFromSecuredConnection(SecuredConnectionLoaderImpl.java:83)
         at com.businessobjects.mds.securedconnection.loader.internal.SecuredConnectionLoaderImpl.getConnectionFromSecuredConnection(SecuredConnectionLoaderImpl.java:60)
         at com.businessobjects.dsl.services.workspace.impl.DirectOlapAccessDataProviderBuilder.loadSecuredConnection(DirectOlapAccessDataProviderBuilder.java:193)
         at com.businessobjects.dsl.services.workspace.impl.DirectOlapAccessDataProviderBuilder.loadSecuredConnection(DirectOlapAccessDataProviderBuilder.java:176)
         at com.businessobjects.dsl.services.workspace.impl.DirectOlapAccessDataProviderBuilder.provideUniverseFromCms(DirectOlapAccessDataProviderBuilder.java:63)
         at com.businessobjects.dsl.services.datasource.impl.AbstractUniverseProvider.provideUniverse(AbstractUniverseProvider.java:41)
         at com.businessobjects.dsl.services.workspace.impl.AbstractDataProviderBuilder.updateQuerySpecDataProvider(AbstractDataProviderBuilder.java:119)
         at com.businessobjects.dsl.services.workspace.impl.AbstractDataProviderBuilder.updateDataProvider(AbstractDataProviderBuilder.java:106)
         at com.businessobjects.dsl.services.workspace.impl.AbstractDataProviderBuilder.addDataProvider(AbstractDataProviderBuilder.java:49)
         at com.businessobjects.dsl.services.workspace.impl.WorkspaceServiceImpl.addDataProvider(WorkspaceServiceImpl.java:56)
         at com.businessobjects.dsl.services.workspace.impl.WorkspaceServiceImpl.addDataProvider(WorkspaceServiceImpl.java:45)
         at com.crystaldecisions.reports.dsl.shared.DSLTransientUniverseServiceProvider.createSessionServicesHelper(DSLTransientUniverseServiceProvider.java:72)
         at com.crystaldecisions.reports.dsl.shared.DSLServiceProvider.createSessionServices(DSLServiceProvider.java:428)
         at com.businessobjects.crystalreports.designer.qpintegration.DSLUtilities.getServiceProvider(DSLUtilities.java:279)
         at com.businessobjects.crystalreports.designer.qpintegration.InitializeDSLRunnable.run(InitializeDSLRunnable.java:82)
         at org.eclipse.jface.operation.ModalContext$ModalContextThread.run(ModalContext.java:121)
    Here seems to be that a plugin is not loaded : com.crystaldecisions.sdk.occa.infostore.internal.InfoObjects||Assertion failed: Java plugin for CommonConnection is not loaded.
    could this affect the performance of Crystal Reports for Enterprise and how could I fix this ?
    Best Regards
    Anis

    Venkat,
    Thanks for your response. Please note, however, the transaction RAD1 does not exist. Let me provide more details about the current settings of the InfoObject.
    The Characteristic is 'Item' (0CS_ITEM) and upon going to RSA1 >  Modeling > InfoObjects > Item (0CS_ITEM) > Right Click > Display > Business Explorer (tab) > Text Type is set to 'Long Text' and BEx description is set to 'Long description' already.
    When I run/execute the query with this Item characteristic, the results in BEx Analyzer is showing appropriate long text, however, Crystal Report for Enterprise shows short text only
    K
    Edited by: Kumar Pathak on Feb 3, 2012 6:18 PM

  • Crystal Report for Enterprise not displaying Long Text from BEx

    Hello,
    I am creating a report using SAP Crystal Report for Enterprise 4.0 (Version 14.0.2) and the source of data is BEx query via OLAP connection created using IDT. I am using SAP BusinessObjects BI platform 4.0.
    The Characteristic (which is hierarchy) in the Rows section of the BEx Query is set to display long text and as such, it displays long text when the query is executed in the BEx Analyzer. However, when it comes to Crystal Report, the short text is displayed in the report. Can I display long text in the Crystal Report? How?
    Thanks,
    KP

    Venkat,
    Thanks for your response. Please note, however, the transaction RAD1 does not exist. Let me provide more details about the current settings of the InfoObject.
    The Characteristic is 'Item' (0CS_ITEM) and upon going to RSA1 >  Modeling > InfoObjects > Item (0CS_ITEM) > Right Click > Display > Business Explorer (tab) > Text Type is set to 'Long Text' and BEx description is set to 'Long description' already.
    When I run/execute the query with this Item characteristic, the results in BEx Analyzer is showing appropriate long text, however, Crystal Report for Enterprise shows short text only
    K
    Edited by: Kumar Pathak on Feb 3, 2012 6:18 PM

  • Asset history report for bunch of assets

    Hi,
    I have created an asset through the following steps
    Internal Order KO01
    Budgeting T Code KO22
    Release of Internal Order  KO02
    Creation of AUC  AS01
    Creation of PO  ME21N
    Now when I see the report AW01N for this asset, everything is available on the asset history sheet.  Likewise I need such a report where I can pull out for bunch of assets with the above history informtion like IO No, PO No etc against those assets.
    I have some 500 assets for which IO no and PO no I need against each asset.
    Please tell me the standard asset report for this.
    Regards,
    babjee

    Hi babjee,
    I think you have to use for this an internal order report (line item report?. On the internal orders all information is avaiable. I think this is the reason that you use internal orders!
    On the internal order you collect all the posting and the AUC is a cost collector for short term and when you settle it to the Final asset this is the endpoint.
    I don't have seen that the information  from KO22, KO02, ME21N are direct available in AW01N
    Paul

Maybe you are looking for

  • Creation of material with BAPI

    hi SAP folks, Iam a beginner in ABAP.need some clarifications on BAPI 1. what is BAPI?how is that used for creation of materials. 2. In what way that is different from BDCs. 3. Which is mostly preferred and why? 4. How are BAPIs called from Zprograms

  • Export stuck at around 10%-15%

    Using QuickTime Pro, I tried to export a nine-minute, 142MB MP4 video to a QuickTime movie (Movie to QuickTime Movie). After clicking Save, the progress bar went up to about 10% and just froze there. After about an hour of exporting, it's still there

  • Where'd the 5 computer accounts go?

    I tried to play a song that I had downloaded on another computer. It said something like I needed to 'authorize' this computer to play that track. I tried to authorize it and got a message that I've run out of accounts and need to 'de-authorize' a co

  • Voyager Calcuations

    Have a grid in Voyager that shows 2008 vs 2007 data in columns by Diagnosis group in rows.  THere's a calculated column that calcs 2008 as a percent of 2007. Row total for ALL Diagnosis groups incorrectly totals the percentage.  How do I make it reca

  • Preventing copying / forwarding in Lotus Notes

    I want to prevent recipients from copying/forwarding emails that I send out programatically using JavaMail. Notes has a header $KeepPrivate which must be set to "1" in order to do this. But for some reason it shows up in Notes as $24KeepPrivate and t