Retrieving Logs with a Particular Engine Update Status

By default, Control Manager Syslog Forwarder retrieves logs with the following engine update status:

  • Up-to-date

  • Out-of-date

You can configure Syslog Forwarder to only retrieve a particular status.

  1. Go to the Control Manager root folder.

    C:\Program Files\Trend Micro\Control Manager or

    C:\Program Files (x86)\Trend Micro\Control Manager

  2. Open DataSource_Localhost.ini using a text editor.
  3. Go to the [engine_updated_status] section, search for the ComponentStatus string and then set the value to 1 or 2.

    1 = Up-to-date

    2 = Out-of-date

    For example:

    [engine_updated_status]

    event_id=800102

    enable=0

    ComponentStatus=1

  4. Save and close the file.