Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update. Please follow knowledge base article 133945
Learn about the Benefits of Multi-Factor Authentication (MFA). Turn your MFA on now!
We'd love to hear about it! Click here to go to the product suggestion community
I have been asked to create a scheduled report detailing the Data Control Events. The Managed report option within the Enterprise Console (5.5.1) is not sufficient enough in detail.
Ideally I would like the report to detail Date/time, User, Computer Rule, name Rule, action, File name, File size (KB), File type, Source path, Destination path, Destination type.
Does anyone know the best way to produce such a report please?
there's no predefined report as you already know.The Reporting Interface provides the vEventsDataControlData view that returns most of the information shown by Events → Data Control Events ... with the exception of the indicator that a rule has been modified since the event. And you'd have to map the ComputerID to the computer's Name.
In reply to QC:
Thanks Christian for your quick response. I will give this a go. It will be the first time on using the reporting interface.