Guest User!

You are not Sophos Staff.

Thread Info
  • Locked Locked
  • Replies 3 replies
  • Subscribers 11 subscribers
  • Views 9354 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Central Admin: Exporting events limits within Central Admin

Gowtham Mani

The Export functionality within Sophos Central Admin allows you export the current view or the report for up to the past 90 days as a CSV (comma separated value) or PDF file.

The supported limit/amount of Events that can be exported within the Sophos Central Admin UI is 100,000 items/events.

It will be possible to export more than this amount, though the attempt may fail (browser timeout, some sections in the Event Report will not return data) when trying to export a lot more from the UI itself.

There is also a new issue found when trying to export data (under 100k events) where a blank csv or pdf is returned. This is seen to happen if your report is filtered through a much larger set of events (eg. 500k+).
Until this issue is resolved, the only workaround is to break up the report into smaller time frames (eg. 1 month vs 3 month, or 1 week vs 1 month) at a time.

For more details, please refer Sophos Central Admin: Exporting events limits within Central...



This thread was automatically locked due to age.
Parents

  • Hi Gowtham,

     

    Would you be able to provide a BugID or incident tracking number?  Anything where we can follow the status of this issue and plan for an ETA would be awesome.  In the meantime we'll continue to break down the logs into smaller chuncks, but as you can imagine, this cost a lot more (in staff time) than the product being able to handle the reporting properly.

     

    Thanks so much!

Reply

  • Hi Gowtham,

     

    Would you be able to provide a BugID or incident tracking number?  Anything where we can follow the status of this issue and plan for an ETA would be awesome.  In the meantime we'll continue to break down the logs into smaller chuncks, but as you can imagine, this cost a lot more (in staff time) than the product being able to handle the reporting properly.

     

    Thanks so much!

Children
Unfiltered HTML