Report help

[chads]

How would i go about creating a report with machine information related to this event log error.

Product: Sophos AutoUpdate -- Internal Error 2324

do i need to turn on event log scanning? this can be seen on PC's when i look at them in lansweeper.

i am on 5.0

[chads]

Awesome as always thank you got what i needed.

[Hemoco · Accepted solution]

A sample event log report can be seen below. Replace YourCode with the event code you would like to report on. The report will list all events of the specified code that occurred in the last 7 days. Replace the number marked in bold to change the time frame.

Select Top 1000000 tsysOS.Image As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.IPAddress,
tsysOS.OSname,
tblAssets.SP,
tblNtlog.Eventcode,
Case tblNtlog.Eventtype When 1 Then 'Error' When 2 Then 'Warning'
When 3 Then 'Information' When 4 Then 'Success Audit'
When 5 Then 'Failure Audit' End As Type,
tblNtlogFile.Logfile,
tblNtlogMessage.Message,
tblNtlogSource.Sourcename,
tblNtlogUser.Loguser,
tblNtlog.TimeGenerated
From tblAssets
Inner Join tsysOS On tsysOS.OScode = tblAssets.OScode
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogFile On tblNtlogFile.LogfileID = tblNtlog.LogfileID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogUser On tblNtlogUser.LoguserID = tblNtlog.LoguserID
Where tblNtlog.Eventcode = YourCode And tblNtlog.TimeGenerated > GetDate() - 7
Order By tblNtlog.TimeGenerated Desc

To use the specified report, do the following:
• Browse to the Dashboard\Reports\Report Builder section of the web console.
• Paste the SQL code we provided at the bottom of the page.
• Left-click somewhere in the upper section of the page so the code applies.
• Give the report a Title and hit the Save & Run Report button to save it. Export options are listed on the left.
• The report will now also be listed under Dashboard\Reports\All Reports.