Sophos Update State from Database

Question

Hi there,

i found the very useful thread sophos db querys here in the forum.

But for me i would be interested in the update state of the clients. The Database Sophos47 contains in the ComputerAndDeletedComputers table an field called "outofdate", but it seems to be always null.

In the Enterprise Console the client will be shown as "up to date", so it would be nice to know how to get the update state from an query.

Anyone got information on that topic?

Thank you in advance.

This thread was automatically locked due to age.

jak · Accepted Answer

Hi,

For a machine to be up-to-date, you're really comparing what SUM has sent to the database against what the client has reported in. The best way for working out this sort of thing is to perform an action in SEC, such as selecting the out-of-date computers filter and using SQL Profiler to see what it calls. In this case, taking the SOPHOS4 db as an example you see the following stored procedure called: 
 exec dbo.ComputerListOutOfDateGet '2010-08-22 14:18:59:000',0 to get the list of computer ids, where the timestamp is the current time in UTC -1 hour and the 0 is s a flag to return connected or not connected machines. 1 being connected only. This may do you, but if you are looking for the SQL, you can take a look in the stored procedure and adjust that as you require. In your query you may want to use the SQL functions GetUTCDate() and DateAdd() to automatically pass into the SQL the neccessary time stamp.

Hope this helps.

Regards, 
 Jak :15835