Daily Scan Report

Hi,

SEC 4.7 has a new couple of columns in the computer list view in SEC that will help you:

Last Scheduled Scan completion time
Last Scheduled Scan name.
It also has:
LastMessageTime (This is the last time a client sent a status message ot a Entity-Event)


So you will be able to select a group of machines and sort on the Last Scan Completion time.  The computer list view can be copied and pasted to create a report you can paste into notepad and then imported into Excel for example.

SEC 4.7 should be out quite soon.  

The above fields are already stored in the SOPHOS45 database so you could run a command today such as:

sqlcmd -E -S .\sophos -d sophos45 -i Report.sql -s, -o report.csv

Where Report.SQL would contain something like:

select c.Name, 
c.DomainName,
c.LastMessageTime,
c.LastScanName,
c.LastScanDateTime as LastScanDateTimeUTC,
gp.PathAndName
from dbo.ComputersAndDeletedComputers as c with (nolock)
left join dbo.ComputerGroupMapping as cgm with (nolock) on cgm.ComputerID = c.ID 
left join dbo.GroupPathAndNameTable() as gp on gp.GroupID = cgm.GroupID
where gp.PathAndName = 'Clients\Windows 7'

And .\sophos represents the local SOPHOS named instance of SQL. 

You will need to change the 'Clients\Windows 7' part to be the group you are interested in.

Hope this gives you a few ideas.

Regards,

Jak

Hi,

SEC 4.7 has a new couple of columns in the computer list view in SEC that will help you:

Last Scheduled Scan completion time
Last Scheduled Scan name.
It also has:
LastMessageTime (This is the last time a client sent a status message ot a Entity-Event)


So you will be able to select a group of machines and sort on the Last Scan Completion time.  The computer list view can be copied and pasted to create a report you can paste into notepad and then imported into Excel for example.

SEC 4.7 should be out quite soon.  

The above fields are already stored in the SOPHOS45 database so you could run a command today such as:

sqlcmd -E -S .\sophos -d sophos45 -i Report.sql -s, -o report.csv

Where Report.SQL would contain something like:

select c.Name, 
c.DomainName,
c.LastMessageTime,
c.LastScanName,
c.LastScanDateTime as LastScanDateTimeUTC,
gp.PathAndName
from dbo.ComputersAndDeletedComputers as c with (nolock)
left join dbo.ComputerGroupMapping as cgm with (nolock) on cgm.ComputerID = c.ID 
left join dbo.GroupPathAndNameTable() as gp on gp.GroupID = cgm.GroupID
where gp.PathAndName = 'Clients\Windows 7'

And .\sophos represents the local SOPHOS named instance of SQL. 

You will need to change the 'Clients\Windows 7' part to be the group you are interested in.

Hope this gives you a few ideas.

Regards,

Jak