Centrally configuring the filtering of messages from workstations

  • Article ID: 13872
  • Updated: 30 Jul 2009

You can use the command line tools ExportConfig.exe and ConfigCID.exe to centrally configure the filtering of error messages returned by client workstations to Enterprise Console. This is useful if Enterprise Console performance has become affected by huge numbers of reports of a known issue.

These instructions should only be used as a temporary workaround. In the longer term, the original issue should be fixed.

What to do

1. Identify the error code for suppression

Check Enterprise Console for the error code you want to filter out, and make a note of it. For example, e03d0036.

2. Export the configuration file

Use ExportConfig.exe to export your current Sophos Anti-Virus configuration to the file savconf.xml.

3. Edit the configuration file

  1. Find your savconf.xml file in your Central Installation Directory (CID).
  2. Open the file savconf.xml in Notepad.
  3. In the menu bar, select 'Format'. Disable 'Word Wrap'.
  4. Scroll down to the bottom of the file.
  5. Just above the tag '</config>', copy and paste in the following text, changing the error code as required (for example, the code 0XE03D0036 suppresses the error code e03d0036 - precede the code with '0X' to indicate hexadecimal format).
    Do not insert line breaks.

    <inst:install xmlns:inst="http://www.sophos.com/SAVXP/SavInstallConfiguration" xmlns="http://www.sophos.com/SAVXP/SavInstallConfiguration">
    <!-- Custom settings for alerting (optional) -->
    <alerting>
    <!-- Enterprise Console alerts (optional) -->
      <ee>
      <!-- Black list of message IDs (optional) -->
       <blackList>
        <add>0xE03D0036</add>
       </blackList>
      </ee>
    </alerting>
    </inst:install>

  6. Save the file savconf.xml.

4. Implement the changes

Use ConfigCID.exe to implement the changes you have made.

Reversing the changes

To reverse the changes, update the copy of the file savconf.xml in your CID by deleting the error code entries that you added, but leave the outer tags:

<blackList>
</blackList>

Then re-run ConfigCID.exe. The customization will be removed the next time Sophos Anti-Virus updates.


Further information

If you want to exclude multiple errors, use the following XML format:

<blackList>
<add>0xE03D0036</add>
<add>0xE03D0037</add>
</blackList>

 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments