Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 2 answers
  • Subscribers 28 subscribers
  • Views 2364 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Logs not updating since I synchronized with Sophos Central

Badrobot

I synchronized the XG Firewall with central a couple days ago, today I notice 0 on network attacks, allowed app, blocked app, which I thought was off since we usually get something in attacks with the webserver.  I then thought to check the logs and found the newest logging only shows from a few days ago which was when I turned on synchronization.  Which could be a fluke of timing as well.

 

Has anyone had issues with logging and reporting not working correctly?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to LuCar Toni

    Sophos support says they don't have a solution to this problem.
    To temporarily resolve the situation, I put a cron job on a linux machine to restart the gartner process every hour.
    Here's the script for anyone who needs it.

    #!/usr/bin/expect -f
    spawn ssh 1.2.3.4 -l admin
    expect "password:"
    send "password\r"
    expect "Main Menu"
    send "5\r"
    expect "*"
    send "3\r"
    expect "*"
    send "service garner:restart -ds nosync\r"
    expect "200 OK"
    send "exit\r"
    expect "*"
    send "0\r"
    expect "*"
    send "0\r"

  • 0 in reply to lvillarreal

    There are currently more than one issue with reporting.

    One is caused by Central Heartbeat (Central integration), the other is still under investigation. 

     

    The initial Post here seems to be related to the first issue, which can be workaround by:

    "Development is working on this , the work-around which we can use is "alert notifications"(Administration->Notifications settings->Alert notifications) be disabled and restart the garner."

     
  • 0 in reply to LuCar Toni

    It´s correct!

    I wrote on the wrong thread.