This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Missing collumns on logging

Hi,

When looking into the firewall logs I am missing the content of the "In" and "Out" interface columns right from the beginning. I think this should be known in most cases even it is a rejected connection.

Afterwards I added the Src zone, Dst zone, Src country, Dst Country. Even on new entries that were inserted after the change I can not see this information. All the columns are empty.

Can somebody tell me why I can not see the data (and what I need to do to make it visible).

Best regards,

Bernd

This thread was automatically locked due to age.

0 Badrobot over 6 years ago

There have been issues with XG 17.5 and others I believe with logging, there are a few steps depending on what version you are on. AFAIK you have to disable notifications then access the firewall through ssh and restart the garner service.

service garner:restart -ds nosync

Three is a thread here: https://community.sophos.com/products/xg-firewall/f/logging-and-reporting/112171/sophos-xg-firewall-17-5-logs-are-not-updating-on-the-gui-log-viewer
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago

You are looking at rule 0 drops, these can be ignored and it you want to disabled. Basically they entries are saying that there is no valid connection so there will not be any details. The connections has timed out or been dropped.

Ian
Cancel
Vote Up 0 Vote Down

Cancel