Event Filters
This view shows the list of all event filters created in the Executables section. Event Filters are special rules in ESET Inspect determining which low-level events should not be stored in the database. The database size is proportional to the number of stored low-level events. By reducing the number of stored events, Event Filters help to lower the disk usage and improve performance.
Event Filters do not need to be used if ESET Inspect is configured to Store only the most important data or Store data related directly to detections in More > Settings.
The Dashboard > Events Load helps to find executables and computers that report most of the low-level events. Event filters can be created using the Filter events button on the Executable details page.
Filtering, Tags and Table options
Use filters at the top of the screen to refine the list of displayed items. Tags are also powerful when searching for a specific computer, detection, incident, executable, or script. Also you can click the gear 
icon for table options to manage the main table.
Click a filter name to take further actions:
Details |
Go to the Rule details tab. |
|---|---|
Edit Rule |
Go to the Edit rule tab. |
Change assignment |
Go to the Targets view of the selected filter. |
Enable |
Enables selected filters. |
Disable |
Disables selected filters. |
Delete |
Deletes selected filters |
Save As |
Saves selected filters under the desired name. |
Export |
Starts the export process of the filter, depending on the used web browser. The format of the file is XML. |
Import |
Opens the window for import the XML filter file. The following information is shown: •Total count of imported filters •Count of imported filters with correct syntax •Count of imported filters with incorrect syntax •Count of not imported filters |
Tags |
Assign tag(s) to an event filter from the list of existing, or create a new custom tag(s). |
Filter |
Quick filters, depending on the column where you activated the context menu (Show only this, Hide this). |
|
There is an option to Filter Events through ESET PROTECT policy, but this is deprecated, so we recommend not use this way anymore. |
