This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSRS Custom Report - Active Virus/Spyware Threats

Hi Everyone,

I'm a novice at reporting but am trying to piece things together based on the examples listed in the forums. My biggest problem seems to be identifying the proper table I need to reference. The end goal is to have a web-based report that pretty much mirrors the data we see in the console. If the console says we have 10 computers with Virus/Spyware I want those computers to show up on the report.

At the moment I'm referencing vThreatInstances (Sophos Reporting Interface) with ThreatName, but instead of the expected 10 infected computers I'm getting thousands of old records.

Does anyone happen to have an example they could share with me?

Appreciate the help!

This thread was automatically locked due to age.

Parents

0 AV_Guy over 11 years ago

Below is an example of the query I'm using, but I end up with 30k+ results for virus behavior. Many of these are old and have already been cleared. What do I need to target for active threats?

SELECT     TOP (100) PERCENT dbo.Computers.Name, dbo.Computers.IPAddressText, dbo.Computers.Managed, dbo.Computers.Connected, dbo.Computers.LastMessageTime, 
                      [Sophos Reporting Interface].vGroupPathAndNameData.PathAndName, [Sophos Reporting Interface].vThreatInstances.ThreatTypeName
FROM         dbo.Computers INNER JOIN
                      dbo.ComputerGroupMapping ON dbo.Computers.ID = dbo.ComputerGroupMapping.ID INNER JOIN
                      [Sophos Reporting Interface].vGroupPathAndNameData ON dbo.ComputerGroupMapping.GroupID = [Sophos Reporting Interface].vGroupPathAndNameData.GroupID INNER JOIN
                      [Sophos Reporting Interface].vThreatInstances ON dbo.Computers.ID = [Sophos Reporting Interface].vThreatInstances.ComputerID
WHERE     (dbo.Computers.LastMessageTime > DATEADD(dd, - 30, GETDATE())) AND ([Sophos Reporting Interface].vThreatInstances.ThreatTypeName = N'Viruses/spyware')

Reply

0 AV_Guy over 11 years ago

Below is an example of the query I'm using, but I end up with 30k+ results for virus behavior. Many of these are old and have already been cleared. What do I need to target for active threats?

SELECT     TOP (100) PERCENT dbo.Computers.Name, dbo.Computers.IPAddressText, dbo.Computers.Managed, dbo.Computers.Connected, dbo.Computers.LastMessageTime, 
                      [Sophos Reporting Interface].vGroupPathAndNameData.PathAndName, [Sophos Reporting Interface].vThreatInstances.ThreatTypeName
FROM         dbo.Computers INNER JOIN
                      dbo.ComputerGroupMapping ON dbo.Computers.ID = dbo.ComputerGroupMapping.ID INNER JOIN
                      [Sophos Reporting Interface].vGroupPathAndNameData ON dbo.ComputerGroupMapping.GroupID = [Sophos Reporting Interface].vGroupPathAndNameData.GroupID INNER JOIN
                      [Sophos Reporting Interface].vThreatInstances ON dbo.Computers.ID = [Sophos Reporting Interface].vThreatInstances.ComputerID
WHERE     (dbo.Computers.LastMessageTime > DATEADD(dd, - 30, GETDATE())) AND ([Sophos Reporting Interface].vThreatInstances.ThreatTypeName = N'Viruses/spyware')

Children

No Data