Logging and reporting not available for the past week?

Question

Our XG210 stopped updating logs and reports on 1/22. The log viewer and reporting viewer functions still work, but no new information shows up. Logging/reporting settings haven't changed. I have tried turning logs off and then back on, but did not make a difference. Any tips on what I should look at/how to trouble shoot this?

This thread was automatically locked due to age.

Krister Johnson · Accepted Answer

I ran "flush device reports" from the console and after the box came back up, logging seems to be working.

FormerMember · Answer

Hi, 
 Please refer Sophos XG Firewall: How to troubleshoot on-box reporting issues for troubleshooting such kind of issue. 
 I think that the issue you had faced may be because "Report-Partition-Usage Percentage had exceeded its Watermark Percentage" , due to which XG firewall may have stopped displaying reports as per its behavior. 
 You can check this percentage values in the console of the firewall using commands, console> show report-disk-usage watermark & console> system diagnostics show disk 
 Now to start the reporting back we need to reduce the report-disk-usage to be less than the watermark. 
 @Krister - I think what you did with "Flush Device Reports" was to clear the report partition to 0%, which indirectly resolved it as it would make report-disk-usage less than watermark percentage. Though this is not a feasible solution for all to clear all the reports. 
 You can also somewhat prevent this from re-occurring, by reducing the Log Retention Period under "Reports > Show Reports Settings > Data Management" from 6months to 3months or less for some modules. 
 The other troubleshooting steps are already mentioned in the referred article. 
 Cheers J