Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 19 subscribers
  • Views 15519 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Enterprise Console reporting feature request

JoeLansing

Lets say I have 30 PC's that are showing Unmanaged.  And 51 Out of Date.  I want to be able to export a list of them ( A Report? ) that I can give to those who will then go fix the issues.    All the reports seem to just contain X Number of Computers and nothing specific as far as PC names.   They are pretty looking reports, but fairly useless.  I'd rather have a practical report that will assist me in fixing the issues shown on the report.

:51244


This thread was automatically locked due to age.
  • 0

    Hello JoeLansing,

    :smileytongue: reports are for managers and auditors :smileytongue:

    seriously - perhaps copy/paste of the list in current console view is adequate. Click somewhere in the list and use Ctrl-C to make a tab delimited copy (or use Edit->Copy from the menu-bar).

    Christian

    :51274
  • 0

    Along the same line, I would like to receive a daily report of all computers that are showing alerts.  I would think that this should be much simpler than going to the console and manually exporting a list of computers every day.

    :55009
  • 0

    Hello RubinCompServ,

    the following query against the database (use the applicable instance and database names) would give you (just) the names of the Computers with alerts (no further breakdown virus, sus, or PUA):

    sqlcmd -E -S .\Sophos -d SOPHOS5xx -Q "Select Name From AliveComputers where LastThreatInstanceID is not NULL"

     A similar query could be used to list the computers with errors.

    Policy compliance is, as far as I can see, not so simple and up-to-dateness is a challenge. The Dashboard considers only connected computers.

    Christian

    :55015
  • 0

    QC,

    Running multiple queries on a daily basis is prone to error, not overly readable, doesn't guarantee that nothing is missed, and - above all - a manual process.  I would like to have a simple report waiting for me every morning, along with the reports from all of my other systems.  That fact that the Dashboard only considers connected computers should not be a hinderence - surely there is a "last connected time" field that can be displayed.

    :55018
  • 0

    Hello RubinCompServ,

    multiple queries on a daily basis is prone to error

    SEC does just that under the bonnet - and at times of heavy load it might miss a schedule, been there. A (Windows) scheduled task is not "inferior".

    Agreed, a status snapshot would be nice - you'd have to read it with more than a grain of salt though.  The numbers in the Managed Endpoint Protection report are, BTW, nonsense - I have more up-to-date computers that ones with AV installed ... :smileyhappy:

    Christian

    :55020
Unfiltered HTML