I'm missing a log entry for central-managed computers
after the forensic snapshot I started a scan.
no information about that anywhere. why that?
If this is by design I wonder how to keep control and knowledge about what has - and what has not - been done with a huge ammount of machines in case of a potential infection.
Are you looking for the logs after you initiate the scan? If so? Then the logs will be automatically saved on the system and can be found on this path C:\ProgramData\Sophos\Sophos Anti-Virus\logs.
If you’re wondering as to why it didn’t show on your central dashboard, that is normal as this is by design.
I dont intend to collect logs from individual machines. I need this basic information in Central.
Do you need this as feature request?
guess this has to be a feature request. The scanner never sent information about the start of a scan to management - only success, cancel or abort events are reported.
Thanks for the update and confirmation.
Created a FR