About the ESMSuppression table

The ESMSuppression table stores the properties of the Symantec ESM suppressions. The PolicyCheckID and Message ID fields relate the suppressions to their policies and messages.

Table: ESMSuppression table

Field name	Type	Description
PolicyCheckID	<text>	RecID from ESMPolicyCheck table
MessageID	<text>	RecID from ESMMessage table
IgnoreMessage	<number>	Suppression must explicitly match wildcard states: 0 Disabled or 1 Enabled
Agent-Expression	<text>	Suppression matches wildcard agent name
Name-Expression	<text>	Suppression matches wildcard agent name and module name
Creator Name	<text>	Manager account that is used to create a suppression
Expiration Date	<number>	Date and time of suppression expiration
CreationDate	<number>	Date and time of suppression creation
LastUsed	<number>	Date and time of last suppression use
Enabled	<number>	Suppression states; either 0 Disabled or 1Enabled
InfoExpression	<text>	Text of the security message that an agent reports.
Annotation	<text>	Suppression comments