How do I view the Event IDs that Sophos Anti-Virus can generate?

  • Article ID: 118912
  • Updated: 15 Apr 2016

This article explains how to view the Event ID information contained in Sophos Anti-Virus, this can be useful for configuring third party event log monitoring applications.

Known to apply to the following Sophos product(s) and version(s)
Sophos Anti-Virus for Windows 2000+

What To Do

  1. Click Start, Run... (Shortcut Windows + R keys), enter the following and click OK:
  2. Click 'Turn Windows features on or off' and select Simple Network Management Protocol (SNMP), this will install a tool called Evntwin.exe, you may be prompted to restart your computer, do this if prompted.
    Note: On Windows servers, you will need to add the Feature called SNMP Services.
  3. Go back to the Run box, enter the following and click OK:
  4. Evntwin.exe
  5. Choose Custom as the Configuration type Then click Edit.
  6. You can then choose the Event sources: Application - Sophos Anti-Virus
  7. In the bottom right hand corner you will be able to see all the Event ID data.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent