Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 2 answers
  • Subscribers 28 subscribers
  • Views 1143 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Where are the firewall logs?

ArunGupta

Running Sophos XG firewall SFOS 18.0.4 MR-4. Cannot find where the firewall logs are. If I use log viewer option, it displays only a handful of lines in the browser.If I want to download even for 4 hours, it would take forever to scroll to the end.

I copied the entire log folder from console to local FTP server. Searched through all the 162 log files and cannot find the logs. I really need to download logs from last 10 hours and just cannot.find them. The Sophos documentation says that firewall logs are in fwlog.log file, but this file contains millions of lines like:

garner: connect(/tmp/garner.sock) failed: Resource temporarily unavailable
garner: connect(/tmp/garner.sock) failed: Resource temporarily unavailable
garner: connect(/tmp/garner.sock) failed: Resource temporarily unavailable
garner: connect(NOTICE: Netlink socket buffer size has been set to 8388608 bytes.
NOTICE: Netlink socket buffer size has been set to 8388608 bytes.
NOTICE: Netlink socket buffer size has been set to 8388608 bytes.

Thanks,

Arun



This thread was automatically locked due to age.
Parents
  • 0

    The XG Firewall does not store the packet filter within the Linux directory.

    You can see the data in Central Firewall reporting, Log viewer, or the reporting tab within XG. 

  • 0 in reply to LuCar Toni

    Thanks for the reply. Am I kind of confused. If the logs are not stored on disk, then how does XG display them?

    As I said, Log Viewer is useless. I need to download the data so I can create custom filters. Where is Central Firewall Reporting? I have home license only. The Reports tab does not show packet filer data. If there is a way to do it, can you please elaborate?

    Thanks,

    Arun

Reply
  • 0 in reply to LuCar Toni

    Thanks for the reply. Am I kind of confused. If the logs are not stored on disk, then how does XG display them?

    As I said, Log Viewer is useless. I need to download the data so I can create custom filters. Where is Central Firewall Reporting? I have home license only. The Reports tab does not show packet filer data. If there is a way to do it, can you please elaborate?

    Thanks,

    Arun

Children