This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos EC 3.0 Dashboard Report Options

Hello,

We currently run Sophos EC Ver.3.0.  Until we are secured at moving to 4.0, I have to collect data of the dashboard in a time-consuming manner.

How can I pull data off the dashboard in a more automated fashion? For example, How can I pull data for computers that have virus infections or adware off the dashboard in that instance?  I've tried using the Reports builder, but it is based on time range and alert history.  I need to pull data of currently active numbers off the dashboard. From my knowledge, the Reports builder may pull computer names that, at one time were infected/out of date/alerted a controlled application during that time range, but now could be desinfected/up to date/app removed and would be a false positive.

If I'm setting up the Reports builder incorrectly, please advise on the proper settings for current dashbord reports.

What alternatives are there to pulling data from the dynamic dashboard for alert information?  OSQL?


Thanks

:280


This thread was automatically locked due to age.
  • Hi echo,

    Console 3.0 is limited with what kinds of reports you can run from the Console itself, and how you can automate or handle them - we have a set of advanced reporting tools you can use here to build your own batch files or commands that can export, format and email a much wider variety of reports from 3.0

    Documentation

    Once you moved onto Console 4.0 you will find this feature set is completely different and much more detailed than under 3.0 and you won't need the command line tools anymore. Console 4.0 lets you build and run your own reports. A KB describing the defaults can be found here

    Hope this helps!

    :287
  • Hi,
     
    If you're looking to grab just the dashboard data the there is a SP in the SOPHOS3 database you could use:
     
    E.g.
    exec dbo.ComputerDashboardDataGet '2009-12-03 15:50:33','2009-12-03 13:50:33'
     
    The parameters required are:
    ServerGMT
    OutOfDateThreshold
     
    I hope this helps with what you are looking to do.  I wouldn't recommend running this query very often as it is quite expensive.
     
    Thanks

    :291