The Sophos Reporting Interface and Sophos Reporting Log Writer provide the components that allow third-party applications to access Sophos Enterprise Console (SEC) threat and event data.
- Sophos Reporting Interface enables direct access to the Enterprise Console database and allows the use of third-party applications such as Crystal Reports to communicate with the SQL server directly.
- Sophos Reporting Log Writer allows the use of third-party log-monitoring applications, for example Splunk, which retrieve data from plain text files rather than directly from a database.
To enable log-monitoring tools, the Sophos Reporting Log Writer service must be installed in addition to the Sophos Reporting Interface.
Applies to the following Sophos product(s) and version(s)
For detailed information and installation instructions, refer to the 'Reporting Interface user guide'. To download this, go to the the Sophos Documentation page, and from the 'Select your product name' drop down, select 'Reporting Interface'.
Creating Reports on data provided by the Sophos Reporting Interface
You can use third-party reporting tools to create custom reports on data provided by the Sophos Reporting Interface.