The Export functionality within Sophos Central Admin allows you export the current view or the report for up to the past 90 days as a CSV (comma separated value) or PDF file.
The supported limit/amount of Events that can be exported within the Sophos Central Admin UI is 100,000 items/events.
It will be possible to export more than this amount, though the attempt may fail (browser timeout, some sections in the Event Report will not return data) when trying to export a lot more from the UI itself.
There is also a new issue found when trying to export data (under 100k events) where a blank csv or pdf is returned. This is seen to happen if your report is filtered through a much larger set of events (eg. 500k+).
Until this issue is resolved, the only workaround is to break up the report into smaller time frames (eg. 1 month vs 3 month, or 1 week vs 1 month) at a time.
For more details, please refer Sophos Central Admin: Exporting events limits within Central...
This thread was automatically locked due to age.
