This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Data Control Events Scheduled Report

Hi, 

I have been asked to create a scheduled report detailing the Data Control Events. The Managed report option within the Enterprise Console (5.5.1) is not sufficient enough in detail. 

 

Ideally I would like the report to detail Date/time, User, Computer Rule, name Rule, action, File name, File size (KB), File type, Source path, Destination path, Destination type.

Does anyone know the best way to produce such a report please?  

Many Thanks



This thread was automatically locked due to age.
Parents
  • Hello RN01.

    there's no predefined report as you already know.
    The Reporting Interface provides the vEventsDataControlData view that returns most of the information shown by Events → Data Control Events ... with the exception of the indicator that a rule has been modified since the event. And you'd have to map the ComputerID to the computer's Name.

    Christian

Reply
  • Hello RN01.

    there's no predefined report as you already know.
    The Reporting Interface provides the vEventsDataControlData view that returns most of the information shown by Events → Data Control Events ... with the exception of the indicator that a rule has been modified since the event. And you'd have to map the ComputerID to the computer's Name.

    Christian

Children