This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SspEdrProcess.log only errors: feedassembler.cpp: 156 Cannot convert unrecognised threat type to string

Hi,

while looking for logs for malfunction of FujitsuDeskupdate because of Sophos Intercept X Client, I found a log called SspEdrProcess.log which does only contain errors and a new log entry is created every few seconds all day long. What is the use of it and what is the problem here?

C:\ProgramData\Sophos\Endpoint Defense\Logs\SspEdrProcess_09.log

[W 2020-09-22T12:47:46.324Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:47:46.328Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:47:46.332Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:47:46.335Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:47:46.339Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:52:36.189Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:52:36.198Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:52:36.208Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:52:36.227Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:52:36.236Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
[W 2020-09-22T12:52:36.245Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string

Btw. the cause for Deskupdate malfunction could not be found in any logs, it just did'nt work until adding global exceptions for the exe and Fujitsu download URLs in Central.



This thread was automatically locked due to age.
Parents
  • Hi,

    while looking for logs for malfunction of FujitsuDeskupdate because of Sophos Intercept X Client, I found a log called SspEdrProcess.log which does only contain errors and a new log entry is created every few seconds all day long. What is the use of it and what is the problem here?

    C:\ProgramData\Sophos\Endpoint Defense\Logs\SspEdrProcess_09.log

    [W 2020-09-22T12:47:46.324Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:47:46.328Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:47:46.332Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:47:46.335Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:47:46.339Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.189Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.198Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.208Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.227Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.236Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.245Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string

    Btw. the cause for Deskupdate malfunction could not be found in any logs, it just did'nt work until adding global exceptions for the exe and Fujitsu download URLs in Central.

Reply
  • Hi,

    while looking for logs for malfunction of FujitsuDeskupdate because of Sophos Intercept X Client, I found a log called SspEdrProcess.log which does only contain errors and a new log entry is created every few seconds all day long. What is the use of it and what is the problem here?

    C:\ProgramData\Sophos\Endpoint Defense\Logs\SspEdrProcess_09.log

    [W 2020-09-22T12:47:46.324Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:47:46.328Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:47:46.332Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:47:46.335Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:47:46.339Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.189Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.198Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.208Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.227Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.236Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string
    [W 2020-09-22T12:52:36.245Z:T000029f4:...feedassembler.cpp: 156] Failed to process journal event: Cannot convert unrecognised threat type to string

    Btw. the cause for Deskupdate malfunction could not be found in any logs, it just did'nt work until adding global exceptions for the exe and Fujitsu download URLs in Central.

Children