Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 28 subscribers
  • Views 561 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Use Central Firewall Reporting and stop reporting on the box

djb-sophos

I had a previous thread about my "report partition" filling up and the Sophos not having the ability to delete old data to make room for new data. I manually purged my entire report partition following this article.

Now, it's back up to 83% again and will eventually run itself into a brick wall. I would like to "Use Central Firewall Reporting and stop reporting on the box" as described on this page. Unfortunately the link just goes to a brochure-like page with no info about how to Use Central Firewall Reporting and stop reporting on the box. Does anyone know of a good link/article/video on how to do this?



This thread was automatically locked due to age.
  • +1

    Do you have a Sophos Central account?

    If so, you should be able to go in to your XG's Sophos Central page and register it, and then in the page's Sophos Central Services select to send logs.

    Under System Services > Log Settings, you should then be able to checkbox the log entries that you want to go to Local, Central, or both. You can also use this page to not log some entries at all. (I don't log "invalid traffic" unless I'm looking for something. That might not be high-volume, but there might be some events that are high-volume that you're just not interested in. That can cut down on local log growth.)

  • 0 in reply to Wayne Folta

    Ok. Not sure if I should start a new thread or not. I have unchecked the entire "local reporting" column. Everything is using Central Reporting. I initiated another manual purge. My question is, where are my logs? If I go to the usual "Log Viewer" and choose "last 30 minutes", everything is blank as expected -- I'm logging to Sophos Central now.

    But where are the logs? All I see are "reports" and can't find recent/active logs that I'm used to seeing. Even when I click on Logs, it goes to reports. If I'm actively trying to view logs for troubleshooting where would I do that?

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?