What is the benefit to running SmartEvent in Learning Mode?
A.
There is no SmartEvent Learning Mode
B.
To generate a report with system Event Policy modification suggestions
C.
To run SmartEvent, with a step-by-step online configuration guide for training/setup purposes
D.
To run SmartEvent with preloaded sample data in a test environment
Hi guys.
To reach the learning mode, navigate yourself Menu>Actions>Learning mode (In SmartEvent).
It’s a grrrreeeat feature.
Love, Brad
B
Answer B
https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm
Tuning SmartEvent Using Learning Mode
SmartEvent is ready “out-of-the-box” with an Event Policy based on real-world expectations. In most cases, however, further fine-tuning is required. The SmartEvent Learning Mode analyzes the Event Log and generates a report with suggestions as to what modifications you should make to your system Event Policy. It should be run a day or so after installing SmartEvent, and whenever you want to further refine the events detected.
B. To generate a report with system Event Policy modification suggestions