This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Anyway to generate customized reports from Sophos DB?

Hi All,

With EM 4 console, there are more reports available, but they are not enough. My business users are refusing to deploy the DLP module because of the lack of reporting options. For DLP violations, the reports does not show the user logon id which is what they need to identify their staff,

Is there anyway to extract a report from the Sophos reporter DB directly? Looking to extract Data violation names, sorted by date and with user information.

:2452


This thread was automatically locked due to age.
Parents
  • Hi,

    The data control event viewer (View - Data Control Events...) will provide you with the username and computer, along with the details of the event.  This can be exported to CSV and filtered accordingly using the search.

    If you wish to go the database route to better automate the incorporate of the data with your systems.

    A combination of the tables in the SOPHOS4 database: "ComputersAndDeletedComputers", "Events_DataControlData" and "Events" should provide you with the data you require.

    I hope this offers some guidance.

    JAK

    :2456
Reply
  • Hi,

    The data control event viewer (View - Data Control Events...) will provide you with the username and computer, along with the details of the event.  This can be exported to CSV and filtered accordingly using the search.

    If you wish to go the database route to better automate the incorporate of the data with your systems.

    A combination of the tables in the SOPHOS4 database: "ComputersAndDeletedComputers", "Events_DataControlData" and "Events" should provide you with the data you require.

    I hope this offers some guidance.

    JAK

    :2456
Children
No Data