This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Daily Scan Report

Looking to automate a report on Daily Scan results, can't find anything within the Report tab,

Any ideas welcome .

Cheers,

LS

:58104


This thread was automatically locked due to age.
Parents
  • Hello LS,

    success

    can be deduced from the LastScanName and LastScanDateTime columns in the ComputersAndDeletedComputers table. No history is kept (there's only Last, if a Full System Scan ...  initiated from the console finished later the information about the scheduled scan is lost) and there's no indication whether the schedule has been missed, the scan has started but been aborted, cancelled or otherwise could not complete, or the completion event hasn't been sent to SEC.

    failed

    abort and cancel errors could be selected from the Errors table, the scan's name is in the Insert1 column. The reason for the abort is in rows with the same ComputerID and a similar AlertTime.    

    {alerts and} errors

    don't AFAIK indicate whether they are related to a scan and which one.

    With not much coding you can get the (number of or list of endpoints with) completed and aborted scans - results might not be 100% correct. The better source for this information (including starts) are the scan logs on the endpoints though.

    Christian

    :58168
Reply
  • Hello LS,

    success

    can be deduced from the LastScanName and LastScanDateTime columns in the ComputersAndDeletedComputers table. No history is kept (there's only Last, if a Full System Scan ...  initiated from the console finished later the information about the scheduled scan is lost) and there's no indication whether the schedule has been missed, the scan has started but been aborted, cancelled or otherwise could not complete, or the completion event hasn't been sent to SEC.

    failed

    abort and cancel errors could be selected from the Errors table, the scan's name is in the Insert1 column. The reason for the abort is in rows with the same ComputerID and a similar AlertTime.    

    {alerts and} errors

    don't AFAIK indicate whether they are related to a scan and which one.

    With not much coding you can get the (number of or list of endpoints with) completed and aborted scans - results might not be 100% correct. The better source for this information (including starts) are the scan logs on the endpoints though.

    Christian

    :58168
Children
No Data