Knowledge Center

How to create an ePolicy Orchestrator report for Endpoint Security reporting Event ID: 1203 (on-demand scans)
Technical Articles ID:   KB87752
Last Modified:  7/10/2019


McAfee Endpoint Security (ENS) Threat Prevention 10.x
McAfee ePolicy Orchestrator (ePO) 5.x


This article explains how to create a basic ePO report for 1203 on-demand scan events that ENS generates.
  1. Log on to the ePO console.
  2. Configure the policies to create and send the 1203 events:
    1. Click Policy Catalog.
    2. Select McAfee Agent from the Product drop-down menu.
    3. Click the General policy assigned to your systems.
    4. Click the Events tab and set Priority event forwarding to Informational.
    5. Click Save.
    6. Select Endpoint Security Common from the Product drop-down menu.
    7. Click the Options policy assigned to your environment.
    8. Click Show Advanced.
    9. Set Event logging for On-Demand Scan to All.
    10. Click Save.
  3. Configure a report for ENS 1203 events:
    1. Click Menu, Queries & Reports.
    2. Click New Query.
    3. Under Feature Group click Events.
    4. Click Threat Events and click Next.
    5. Click Table in the Display Results As table and click Next.
    6. Remove both selected columns by clicking the X in the top right of the boxes.
    7. Add the following Available Columns:
      • System Name
      • Event Generated Time
    8. Click Next.
    9. Add the following Available Properties:
      Event ID Equals 1203
      Product Version (Endpoint Security Threat Prevention) Greater than or equals 10
      On-Demand Full Scan Date Is within the last 1 Weeks (or select On-Demand Quick Scan Date if desired)
    10. Click Save.
    11. For Query Name type a name such as ENSTP On-Demand Full/Quick Scan Completed.
    12. Add the query to any Query Group and click Save.

Rate this document

Beta Translate with

Select a desired language below to translate this page.


This article is available in the following languages:

English United States

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.