About data control events

When a data control event occurs, for example, the copying of a file containing sensitive data to a USB flash drive, the event is sent to Sophos Enterprise Console and can be viewed in the Data Control - Event Viewer. The event is also logged locally on the endpoint computer and can be viewed, with the appropriate permissions, in Sophos Endpoint Security and Control.

Note An endpoint computer can send to Sophos Enterprise Console a maximum of 50 data control events per hour. All events are logged locally on the endpoint computer.

In the Data Control - Event Viewer dialog box, you can use filters to display only the events you are interested in. You can also export the list of data control events to a file. For details, see About data control events and Export the list of events to a file.

The number of computers with data control events over a specified threshold within the last seven days is displayed on the Dashboard. For information on how to set up the threshold, see Dashboard panels.

You can also set up alerts to be sent to your chosen recipients when a data control event has occurred. For details, see Set up data control alerts and messages.