When an application control, data control, device control, firewall, patch assessment, tamper protection, web control or exploit prevention event occurs on an endpoint computer, for example, an application has been blocked by the firewall, that event is sent to Enterprise Console and can be viewed in the respective event viewer.
Using the event viewers, you can investigate events that have occurred on the network. You can also generate a list of events based on a filter you configure, for example, a list of all data control events for the past seven days generated by a certain user.
The number of computers with events over a specified threshold within the last seven days is displayed on the Dashboard (except for tamper protection events). For information on how to set up the threshold, see Configure the Dashboard.
You can also set up alerts to be sent to your chosen recipients when an event has occurred. For more information, see Setting up alerts and messages.