I wanted to share one of the common feature requests that we’ve heard from the customers.
I’m talking about adding the possibility to create a scheduled export for Content Aware Reports.
Nowadays, we already have a similar feature implemented for the Device Control section, but it would be even more useful specifically for the Content Aware section because usually, it has significantly more events and entries.
So, the main idea is to make possible create the scheduled export of some period of time for Content Aware Reports section and make corresponding email alert to then get this export via email.
What do you think regarding this feature idea? I would like to hear some feedback.
The scheduled reports from Device Control are slightly different. While the data under Device Control → Computers cannot be exported to a SIEM, the Content Aware Protection logs are exportable.
As most of our customers utilize a SIEM solution, they can forward the CAP logs to their SIEM and schedule exports from there if necessary. Alternatively, if they require the data in an Excel format on a daily or weekly basis, they can use the “Admin Roles” function to create an admin account for the Reports and Analysis section of the product to review and export the logs as required.
Currently, a scheduled export for the CAP logs is not being considered, as there are good workarounds available.