Tell if Sophos is working - many 'Failed' in logs

Question

Greetings, I am brand new to this community... looking forward to understanding Sophos better. 
 The point of this first post. How can I determine if Sophos is running as it should? ... I recently looked at Sophos log files at C:\ProgramData\Sophos\Sophos Anti-Virus\logs 
 When I run a scan, it takes very long time, then looks to finish but shows last scan was not current. Looking in the log files.. there are approaching half of the lines indicating 'Failed' (4600 lines in 11000 total) 
 Several years ago we moved to Office 365 and OneDrive. One of the things IT has done was to move what looks to be all of My Documents, Desktop, pictures etc to OneDrive. As I understand it, with this in place... setting up a new computer is expedited in that these locations come automatically to the new computer as soon as the user's account is logged into. 
 Is Sophos compatible with scanning locations that are in OneDrive?

Jasmin · Accepted Answer

Hi M3dHutchinson 
 Thank you for the information. 
 I'd recommend you to refer sav.txt file to check the scan results, as this is the file which keeps the track of all detections, scans or virus definition updates done by Sophos AV. 
 You'll have better visibility over what errors have occurred and Anti-virus provides error while scanning the encrypted files and the files where Sophos doesn't have proper permissions to read them. 
 Regarding, one drive scanning locations, they are synced with the locations of the hard drive like my document, download and etc. These drive-based folders will be scanned during the scheduled scan and when someone will try to access any file from one drive which is apart from these folders, they will be scanned by the on-access scanner.

GIJoe · Answer

Only the files that are stored locally will be scanned during a Scheduled or On-Demand scan. The One Drive locally stored files are treated like any other local file on the local disk. Same goes for Box, DropBox, Google Drive. 
 The on-line 'copies' of the sync'd files are considered to be remote files and Sophos does not perform scheduled or on-demand scans of remote files. Sophos only scans the remote files when they are accessed from the remote location. 
 Yes, if you're foolish enough you can disable on-access of scanning Remote Files. I suggest only doing that if you want to suffer a major outbreak. 
 In short, Scheduled or On-Demand scans do not scan the on-line storage areas of One Drive or any other online storage solution. 
 
 Hope this helps to clarify things.