This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

All Reports broken

I am on the latest version and every once in a while my system reporting stops working.  All reports on the "Reports" page change to "No Record Found".  I can re-install the firmware and restore my backup and it fixes it for a while but then it happens again.  No changes are made at the time this occurs.



This thread was automatically locked due to age.
  • This may happen if the content disk partition is over 90% full. You can check it with the "df" command in the advanced shell

  • This happens even after the box has only been online a month.  Very little logging is turned on but accessing traffic reports is needed.

     

    SFVH_SO01_SFOS 16.05.7 MR-7# df
    Filesystem 1K-blocks Used Available Use% Mounted on
    rootfs 333515 2409 309367 1% /
    df: /newroot: No such file or directory
    df: /newroot/dev: No such file or directory
    df: /newrootrw: No such file or directory
    none 333515 2409 309367 1% /
    none 1965648 36 1965612 0% /dev
    none 1965648 6888 1958760 0% /tmp
    none 1965648 12844 1952804 1% /dev/shm
    /dev/conf 394624 59951 334673 15% /conf
    /dev/content 22883958 294617 22589341 1% /content
    /dev/var 200022132 2213764 197808368 1% /var

  • Here is the results of the sub-system

     

    console> system diagnostics show subsystem-info
    SERVICE STATUS
    =====================================
    lcdd UNTOUCHED
    ConfigDB RUNNING
    SigDB RUNNING
    ReportDB RUNNING
    crreport UNREGISTERED
    MTA RUNNING
    nasm RUNNING
    NTPClient RUNNING
    LoggingDaemon RUNNING
    WebFTPProxy RUNNING
    WebProxy RUNNING
    WINGc RUNNING
    POPIMAPDaemon RUNNING
    FTPProxy RUNNING
    IM RUNNING
    IPReputation RUNNING
    Antispam RUNNING
    IPSEngine RUNNING
    RIPD RUNNING
    OSPFD RUNNING
    BGPD RUNNING
    DynRouteD RUNNING
    Dgd RUNNING
    Dhcpd RUNNING
    Dhcpd6 UNREGISTERED
    IPSECVPN RUNNING
    DynDNSClient RUNNING
    Networkd RUNNING
    dyniface UNTOUCHED
    gateway RUNNING
    AppServer RUNNING
    WebServer RUNNING
    Antivirus RUNNING
    sandbox_reportd RUNNING
    sandboxd RUNNING
    Dnsd RUNNING
    SSLVPN UNREGISTERED
    clientless_acce RUNNING
    PPTPD UNREGISTERED
    L2TPD UNREGISTERED
    SMRD UNREGISTERED
    pimd UNREGISTERED
    Msyncd UNTOUCHED
    WAF UNREGISTERED
    red_client UNTOUCHED
    red UNREGISTERED
    supportaccess UNTOUCHED
    heartbeat UNREGISTERED
    hwmon UNREGISTERED
    Access-Server RUNNING
    Bwm RUNNING
    Fwm UNTOUCHED
    Radvd UNREGISTERED
    fqdnd UNREGISTERED
    Fwlog RUNNING
    Pktcapd RUNNING
    hostapd UNTOUCHED
    mdev UNREGISTERED
    awed RUNNING
    hotspotd RUNNING
    policyroute RUNNING
    vmtool UNTOUCHED
    CFS RUNNING
    CSC RUNNING
    Timer RUNNING
    Shm RUNNING
    dbh RUNNING
    =====================================
    Current log usage : 545.0M
    console>

  • Hey Nitr01,

     

    I wanted to bring this back up as I'm now experiencing the same issue you are. I've recently upgrade to 17.5.3 MR-3 and the next day I it was working just fine. Over the weekend, it must of died as when I came into work Monday it was showing "No record found" for everything. I haven't tired re-installing firmware or restoring the backup as I wish to stay away from downtime if possible.

     

    I've followed the steps on here: community.sophos.com/.../123209

     

     SFV4C6_SO01_SFOS 17.5.3 MR-3# service -S
    lcdd UNTOUCHED
    postgres RUNNING
    sigdb RUNNING
    reportdb RUNNING
    crreport UNREGISTERED
    awarrensmtp UNREGISTERED
    smtpd RUNNING
    nasm RUNNING
    ntpclient RUNNING
    garner RUNNING

    console> show on-box-reports
    Local Reporting : on

    console> system diagnostics show disk
    Partition Utilization(%)
    ===============================
    configuration 18%
    content 1%
    report 37%

    SFV4C6_SO01_SFOS 17.5.3 MR-3# df -h
    Filesystem Size Used Available Use% Mounted on
    rootfs 301.9M 2.6M 279.3M 1% /
    df: /newroot: No such file or directory
    df: /newroot/dev: No such file or directory
    df: /newrootrw: No such file or directory
    none 301.9M 2.6M 279.3M 1% /
    none 11.7G 40.0K 11.7G 0% /dev
    none 11.7G 54.3M 11.7G 0% /tmp
    none 11.7G 14.6M 11.7G 0% /dev/shm
    /dev/conf 385.4M 68.6M 316.7M 18% /conf
    /dev/content 43.6G 378.0M 43.2G 1% /content
    /dev/var 368.7G 136.5G 232.2G 37% /var

     

    To verify, this is what the problem looks like.

    and yes, logging is enabled for almost all of my firewall rules. 

  • Hello H Obe RS,

     

    I'm in the process of rebooting my firewall. Most likely will be able to get down time approval tomorrow morning. I made a case with Sophos Support and this is what they wanted me to do after restarting reporting database. Apparently this daemon has to have a reboot of the firewall to restart. 

  • Great Answer, I just read your post and not answer this post, sorry for that,

     

    Done, the problem was Solved by rebooting the system, so at my post but your post got clearance from the boss.

     

    Thank you for the Reboot

  • Good to hear H Obe RS. I also rebooted my firewall and it worked for me as well.