Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 26 subscribers
  • Views 12500 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Syslog down - no events on XG

lferrara

Hi all,

I attached iView to XG in order to do some test for a new customer. I was quite surprise that if the Syslog is not available for some reason, on XG there is not an alarm, an event inside any log. So this is a missing feature. Also I guess that does not cache events if the Syslog is down/unreachable.

Can someone from Sophos confirm this behaviour? Any improvement is expected in the next future?

Thanks



This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to Aditya Patel

    Thanks Aditya.

    Maybe the situation is not clear. Everything is working as expected.What I am saying is: if the connection between XG and iView is not working anymore (firewall between them, syslog down, etc), XG does not warn the users or an error appears in any log. So you do not know if the XG still has a connection and it is pushing logs to XG.

    XG does not write nothing inside the logs.

    Thanks

Children