View data control events

Note This feature will be unavailable if your license doesn't include Data Control.

If you use role-based administration, you must have the Data control events right to view data control events in Sophos Enterprise Console. For more information about role-based administration, see Managing roles and sub-estates.

To view data control events:

On the Events menu, click Data Control Events.
The Data Control - Event Viewer dialog box appears.
In the Search period field, click the drop-down arrow and select the period for which you want to display the events.

You can either select a fixed period, for example, Within 24 hours, or select Custom and specify your own time period by selecting the starting and ending dates and times.
If you want to view events for a certain user, computer, or file, enter the name in the respective field.

If you leave the fields empty, events for all users, computers, and files will be displayed.

You can use wildcards in these fields. Use ? for any single character and * for any string of characters.
If you want to view events for a certain rule, in the Rule name field, click the drop-down arrow and select the rule name.

By default, the event viewer displays events for all rules.
If you want to view events for a certain file type, in the File type field, click the drop-down arrow and select the file type.
By default, the event viewer displays events for all file types.
Click Search to display a list of events.

You can export the list of data control events to a file. For details, see Export the list of events to a file.