Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to rebuild graphs?

After every update, occurs some kind of magic on our cluster and I dont see Graphs (Network usage, web application firewal, etc.) anymore or they are partially deleted/cutted/eaten. My question is: how can I recover graphs from logs and if that is actually possible?


This thread was automatically locked due to age.
  • If this is a home license, you can do the following at the command line as root:

    cd /var/log/reporting/rrd
    rm *
    cd /etc/init.d
    ./syslogng restart
    ./rrdcache restart
    cd /usr/local/bin/reporter
    ./system-reporter.pl


    If you have a paid license, contact your reseller to have Sophos Support do this.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • I have asked Sophos Support and got the same answer as from you BAlfson. However I wanted to rebuild the graphs from logs which already existing, not only delete old wrong graphs and begin from 0. These logging graphs doesnt have any sense if they are every time after update broken. Also they are not synchronized between nodes in HA and when I make takeover I dont see graphs from other node and they are again counted from 0.
  • skm, I don't think that deletes the database entries, I think it just rebuilds the graphs from them.  If the graphs are again gone after the failover, just do the above again.  Once you've done this on the second node, you should be OK.

    If they're empty after the rebuilds, come back here and tell us.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • I have made it once more:

     fw:/var/log # cd /var/log/reporting/rrd
     fw:/var/log/reporting/rrd # rm *
     fw:/var/log/reporting/rrd # /etc/init.d/syslogng restart
    :: Stopping Logging                                                       
    :: Starting Logging                                                       
    :: Restarting Logging
     fw:/var/log/reporting/rrd # /etc/init.d/rrdcache restart
    :: Stopping rrdtool cache                                                 
    :: Starting rrdtool cache                                                 
    :: Restarting rrdtool cache
     fw:/var/log/reporting/rrd # /usr/local/bin/reporter/system-reporter.pl



    Here is result:



Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?