Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1448 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Update State from Database

SearchForTheCod

Hi there,

i found the very useful thread sophos db querys here in the forum. 

But for me i would be interested in the update state of the clients. The Database Sophos47 contains in the ComputerAndDeletedComputers table an field called "outofdate", but it seems to be always null. 

In the Enterprise Console the client will be shown as "up to date", so it would be nice to know how to get the update state from an query.

Anyone got information on that topic?

Thank you in advance.

:15829


This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    For a machine to be up-to-date, you're really comparing what SUM has sent to the database against what the client has reported in.  The best way for working out this sort of thing is to perform an action in SEC, such as selecting the out-of-date computers filter and using SQL Profiler to see what it calls.

    In this case, taking the SOPHOS4 db as an example you see the following stored procedure called:


    exec dbo.ComputerListOutOfDateGet '2010-08-22 14:18:59:000',0

    to get the list of computer ids, where the timestamp is the current time in UTC -1 hour and the 0 is s a flag to return connected or not connected machines. 1 being connected only.

    This may do you, but if you are looking for the SQL, you can take a look in the stored procedure and adjust that as you require. In your query you may want to use the SQL functions GetUTCDate() and DateAdd() to automatically pass into the SQL the neccessary time stamp.

    Hope this helps.

    Regards,

    Jak

    :15835
Reply
  • 0

    Hi,

    For a machine to be up-to-date, you're really comparing what SUM has sent to the database against what the client has reported in.  The best way for working out this sort of thing is to perform an action in SEC, such as selecting the out-of-date computers filter and using SQL Profiler to see what it calls.

    In this case, taking the SOPHOS4 db as an example you see the following stored procedure called:


    exec dbo.ComputerListOutOfDateGet '2010-08-22 14:18:59:000',0

    to get the list of computer ids, where the timestamp is the current time in UTC -1 hour and the 0 is s a flag to return connected or not connected machines. 1 being connected only.

    This may do you, but if you are looking for the SQL, you can take a look in the stored procedure and adjust that as you require. In your query you may want to use the SQL functions GetUTCDate() and DateAdd() to automatically pass into the SQL the neccessary time stamp.

    Hope this helps.

    Regards,

    Jak

    :15835
Children
No Data