You can configure Symantec Endpoint Detection and Response to automatically create reports based on a schedule that you specify. The Symantec EDR cloud environment doesn't support scheduling reports.
To create a scheduled report
Do one of the following:
In the EDR cloud console, click Reports. Then under Environment, select the appliance on which you wan to schedule a report.
In the EDR appliance console, click Reports.
Hover over a report type (Executive Reports or Incident Details) for which you want to set up a scheduled report, and then click Schedule.
You can't schedule Exports Reports.
On the report's dialog box, specify the following information:
Type a name for this scheduled report.
If you are running the Incident Details Report, type the incident number for which you want to run the report.
From the drop-down menu, select the frequency for which you want this report to run.
Select one or more days of the week on which you want this report to run.
Enter the day of the month on which you want this report to run.
From the drop-down menu, select the UTC time (listed in 15-minute intervals) at which you want this report to run.
This time is used for each day of the week that you specify when creating a weekly schedule.
Type the email addresses of the recipients to whom you want to send a copy of this report. Separate multiple email addresses with a semicolon (;).
Your email address automatically appears in this field. However, you can change it or delete it.
Some SMTP servers limit the number of emails that a user can send per day, or the number of recipients per message. So you might want to restrict the number of recipients, or use an email distribution list instead.