Daily Scan Report

Question

Hi All, Is it possible to run a report to let me know when a group of Pc's had last run a successful Daily Scan. Thanks :11897

jak · Accepted Answer

Hi,

SEC 4.7 has a new couple of columns in the computer list view in SEC that will help you: 
 Last Scheduled Scan completion time Last Scheduled Scan name. It also has: LastMessageTime (This is the last time a client sent a status message ot a Entity-Event) So you will be able to select a group of machines and sort on the Last Scan Completion time. The computer list view can be copied and pasted to create a report you can paste into notepad and then imported into Excel for example. SEC 4.7 should be out quite soon. The above fields are already stored in the SOPHOS45 database so you could run a command today such as: sqlcmd -E -S .\sophos -d sophos45 -i Report.sql -s, -o report.csv

Where Report.SQL would contain something like:

select c.Name, 
c.DomainName,
c.LastMessageTime,
c.LastScanName,
c.LastScanDateTime as LastScanDateTimeUTC,
gp.PathAndName
from dbo.ComputersAndDeletedComputers as c with (nolock)
left join dbo.ComputerGroupMapping as cgm with (nolock) on cgm.ComputerID = c.ID 
left join dbo.GroupPathAndNameTable() as gp on gp.GroupID = cgm.GroupID
where gp.PathAndName = 'Clients\Windows 7' 
 And .\sophos represents the local SOPHOS named instance of SQL.

You will need to change the 'Clients\Windows 7' part to be the group you are interested in.

Hope this gives you a few ideas.

Regards, Jak :11901