[8.163][DUPE][CLOSED] Antivirus Logging

Hi All

I think that the antivirus counter on the dashboard is not correct. Today I had 2 virus  as per dashboard but I can't find any virus detected today (please see images attached)

Thanks
Parents
  • Kai the only entried found (2 entries so counting works)

    /var/log/http.log:2011:04:29-10:53:59 **** httpproxy[6128]: id="0056" severity="info" sys="SecureWeb" sub="http" name="web request blocked, error while scanning" action="pass" method="GET" srcip="192.168.***.****" dstip="156.154.17.116" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="37974" request="0xd4de1020" url="www.ultradns.com/.../html" engine="Astaro-AV"
    /var/log/http.log:2011:04:29-11:04:15 *** httpproxy[6128]: id="0056" severity="info" sys="SecureWeb" sub="http" name="web request blocked, error while scanning" action="pass" method="GET" srcip="192.168.***.****" dstip="156.154.17.116" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="38012" request="0xd3eec278" url="www.ultradns.com/.../html" engine="Astaro-A


    however, this shouldn't be counted as virus
Reply
  • Kai the only entried found (2 entries so counting works)

    /var/log/http.log:2011:04:29-10:53:59 **** httpproxy[6128]: id="0056" severity="info" sys="SecureWeb" sub="http" name="web request blocked, error while scanning" action="pass" method="GET" srcip="192.168.***.****" dstip="156.154.17.116" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="37974" request="0xd4de1020" url="www.ultradns.com/.../html" engine="Astaro-AV"
    /var/log/http.log:2011:04:29-11:04:15 *** httpproxy[6128]: id="0056" severity="info" sys="SecureWeb" sub="http" name="web request blocked, error while scanning" action="pass" method="GET" srcip="192.168.***.****" dstip="156.154.17.116" user="" statuscode="200" cached="0" profile="REF_CnNPwVRtng (Internal Users)" filteraction="REF_DefaultHTTPCFFBlockAction (Internal Users)" size="38012" request="0xd3eec278" url="www.ultradns.com/.../html" engine="Astaro-A


    however, this shouldn't be counted as virus
Children
No Data