Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 14 subscribers
  • Views 1663 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Server Endpoint - unable to start a scan

GernotMeyer

Hi all,

there is an Server Endpoint where I unable to start a scan:

pressing the button: nothing happens. last scan April 10th.

Also triggering from central does not start a scan.

No error message. Any hints how to proceed?



This thread was automatically locked due to age.
  • 0

    Looking at the client side in the ui, when I click on the scan action, in:C:\ProgramData\Sophos\Sophos UI\logs\SophosUI.Net.log I get:

    2021-04-21 21:56:32.1324 [14024:1] - INFO: Bringing main window to front.
    2021-04-21 21:56:34.8395 [14024:1] - INFO: Scan button clicked by user on status page.
    2021-04-21 21:56:34.8395 [14024:1] - INFO: start_scan-action performed.
    2021-04-21 21:56:34.8708 [14024:12] - INFO: Isolation status for SAV has changed.
    2021-04-21 21:56:34.9645 [14024:1] - INFO: scan_details_page_view opened.

    Do you see this, maybe an error?

    Then in the MCSAgent.log:

    C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsAgent.log:

    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: Received request from UI: {"authorisation":{"UI.token": "xxxx"},"action":{"SAV.scannow":"[EXTRAINFO]"}}
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: SAV scannow action does not require authentication
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: Processing action request from UI: SAV.scannow
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: AdapterActionProgress notification received from SAV for action scanProgress :: SAV scan starting

    Finally:C:\ProgramData\Sophos\Sophos Anti-Virus\logs\SAV.txt has:

    20210421 205635 Scan 'Scan my computer' started.

  • 0 in reply to Sophos User930

    Next morning the server has Status "reboot to take update affected". After that reboot the buttons works. It seems that the server simply need some hours to come to that. But its fine now. Thanks for help.

  • FormerMember
    0 FormerMember in reply to GernotMeyer

    If there was a major version update to the software - it will require a reboot to initialize all the elements. There should have been a warning in the ui to advise you of the pending reboot requirement.

Unfiltered HTML