ECS Changing State

You can change the state of a selected number of entries, or if no entries are selected, all entries. Possible states are New or Reprocessed. Reprocessed means that the entry has been collected by an ECS agent and been reprocessed with errors. Already processed data can be reset to New to enable recollection.

To change state of selected or all entries:

1. Select the entries you want to change in the table, or click the Select All button to apply changes to all matching entries. Then right-click and select Set State... 

   The Set State dialog opens where you can see the total number of entries that will be affected.

   Note!

   If the number of matching entries exceeds the maximum number of entries that can be displayed in the ECS Inspector, the dialog only tells you that all matching entries will be affected. If you proceed, another dialog opens up with information about the total number of entries that will be affected, asking you if you want to continue.

2. Select state New or Reprocessed and click OK. If the number of matching entries exceeds the maximum number of entries that can be displayed you will get a question if you want to continue.

3. Click Yes if you want to continue.

   If the number of matching entries exceeds the maximum number of entries that can be displayed, a progress bar will show the progress of the state change. This may be useful if you are changing the state for a large number of entries.

   Otherwise, the state simply changes in the table and the timestamp in the Last RP State Change column is updated.