Kaspersky
Solved

Export detection reports via commandline

  • 27 September 2021
  • 17 replies
  • 179 views

How to export recent detections by using avp.com? 

avp.com REPORT /RA:events.log 

Doesn’t do anything. I am currently running a trial license. 

Is there also a way to detect the current AV DB version via avp or another cmd line tool?

icon

Best answer by Schulte 28 September 2021, 14:29

View original

17 replies

Userlevel 7
Badge +9

@joesecurity  Welcome.

The command has to run under the Kaspersky directory ?
The updater doesn’t provide the DB release date.

 

 

 

I did this, but no success:

 

 

Userlevel 7
Badge +9

@joesecurity Any  Kaspersky or Windows error alert ?

Nothing. But there is no bla.txt. Can it be that this command is disabled during the trial?

Userlevel 7
Badge +9

@joesecurity This is not a trial limitation, this could be a Tech Support issue :thinking:

Please wait for other  suggestions…

Userlevel 7
Badge +5

Hello,

Could you try to use a full file path instead of only a file name? such as c:\balabala.txt.

Regards.

Same, no file is created. Does the file really contain information about recent detections? 

Userlevel 7
Badge +9

@joesecurity  Please try command  “avp.com” (without dot/)  in stead of “./avp.com” ?

Also please export to your “Downloads” or “Documents” folder like indicated by @Wesly.Zhang 
 

 

 

 

 

 

Userlevel 7
Badge +9

@joesecurity  Right click drive C → Properties → General → Label : Enter a Disk name ?

 

Userlevel 7
Badge +9

@joesecurity As you are on a German operating system, Moderator @Schulte could provide a more adequate assistance.

Userlevel 7
Badge +8

Hello @joesecurity,


first of all you should set the path to the report file uniquely.
It is best to use '/RA:%userprofile%/desktop/filename.txt', this will create the file on your desktop.

With 'avp.com report /...' you will get the report which you can see under 'Reports-Systemaudit'. If this is empty, no file will be created.

If you want another report, you have to use the parameter [profile].
For example, with the profile 'FM' the report 'File Anti-Virus' will be exported.
Use 'avp.com report FM /RA:%userprofile%/desktop/filename.txt'.

There are more options, but it would be too long to mention them all here. If you need more reports, feel free to ask.



zunächt solltest Du den Pfad zur reportdatei eindeutig setzen.
Benutze am besten '/RA:%userprofile%/desktop/filename.txt', damit wird die Datei auf Deinem Desktop angelegt.

Mit 'avp.com report /...' bekommt Du dann den Bericht, den Du unter 'Berichte-Systemaudit' sehen kannst. Ist dieser leer, wird auch keine Datei erstellt.

Möchtest Du einen anderen Bericht, must Du den Parameter [profile] benutzen.
Mit dem Profil 'FM' wird z. B. der Bericht 'Datei-Anti-Virus' exportiert.
Benutze dazu 'avp.com report FM /RA:%userprofile%/desktop/filename.txt'.

Es gibt weitere Optionen, das wäre aber zu lang, hier alle zu nennen. Fall Du weitere Berichte brauchst, kannst Du gerne nachfragen.

Thanks, Reports-SystemAudit is indeed empty. I found all profiles here: https://support.kaspersky.com/KESWin/11.6.0/en-US/181294.htm


However I am unable to get any report for Web Anti-Virus:

 

 

E.g. there is no report generated for profile WM.

Userlevel 7
Badge +8

AS = Anti-Spam
EM = Email-Monitoring

Web AV I have not found yet. Search is in progress...

Userlevel 7
Badge +8

The profile of the web-AV might be 'httpscan'. Please test...

Indeed, works. Thank you!

Reply