This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Firewall 17.5: Logs are not updating on the GUI "Log Viewer"

Sophos XG firewall is offering on Device Reporting and logs, which is a good feature for all SMBs. There is another module "Sophos iView" available for logs and reporting but it is good for some critical organization or big data Center who need a lot of logs, reports, and backup of all those.   

Recently, I faced an issue as there is no log showing on the GUI "Log Viewer" but you will see all logs through the command line or some new logs on the auxiliary device but not on the primary devices (new logs not updating). This issue is reported on a virtual and hardware firewall as well. Today I am going to share how to handle this issue without book a ticket with the NOC team.

 

Issue Reported:

Logs are not updating on the GUI "Log Viewer" application of the Sophos XG firewall. 

Troubleshooting Steps:

Please read a full blog post at:

http://www.routexp.com/2019/04/sophos-xg-firewall-175-logs-are-not.html



This thread was automatically locked due to age.
Parents Reply Children
  • I had this issue, made a case with Sophos, was told to disable notifications and run service garner:restart -ds nosync 

     

    If I just ran service garner:restart -ds nosync and did not disable notifications then the logs would work a while then quit, would run service garner:restart -ds nosync and same thing.  Basically rinse and repeat until I disable notifications.  

  • Hi,

    I have applied that approach, but it should not be necessary if the software that they broke was fixed. Also the notifications do not work for all events eg failed logins. Used to work before they broke garner.

    Ian