Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 14 subscribers
  • Views 1664 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Server Endpoint - unable to start a scan

GernotMeyer

Hi all,

there is an Server Endpoint where I unable to start a scan:

pressing the button: nothing happens. last scan April 10th.

Also triggering from central does not start a scan.

No error message. Any hints how to proceed?



This thread was automatically locked due to age.
Parents
  • 0

    Looking at the client side in the ui, when I click on the scan action, in:C:\ProgramData\Sophos\Sophos UI\logs\SophosUI.Net.log I get:

    2021-04-21 21:56:32.1324 [14024:1] - INFO: Bringing main window to front.
    2021-04-21 21:56:34.8395 [14024:1] - INFO: Scan button clicked by user on status page.
    2021-04-21 21:56:34.8395 [14024:1] - INFO: start_scan-action performed.
    2021-04-21 21:56:34.8708 [14024:12] - INFO: Isolation status for SAV has changed.
    2021-04-21 21:56:34.9645 [14024:1] - INFO: scan_details_page_view opened.

    Do you see this, maybe an error?

    Then in the MCSAgent.log:

    C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsAgent.log:

    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: Received request from UI: {"authorisation":{"UI.token": "xxxx"},"action":{"SAV.scannow":"[EXTRAINFO]"}}
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: SAV scannow action does not require authentication
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: Processing action request from UI: SAV.scannow
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: AdapterActionProgress notification received from SAV for action scanProgress :: SAV scan starting

    Finally:C:\ProgramData\Sophos\Sophos Anti-Virus\logs\SAV.txt has:

    20210421 205635 Scan 'Scan my computer' started.

Reply
  • 0

    Looking at the client side in the ui, when I click on the scan action, in:C:\ProgramData\Sophos\Sophos UI\logs\SophosUI.Net.log I get:

    2021-04-21 21:56:32.1324 [14024:1] - INFO: Bringing main window to front.
    2021-04-21 21:56:34.8395 [14024:1] - INFO: Scan button clicked by user on status page.
    2021-04-21 21:56:34.8395 [14024:1] - INFO: start_scan-action performed.
    2021-04-21 21:56:34.8708 [14024:12] - INFO: Isolation status for SAV has changed.
    2021-04-21 21:56:34.9645 [14024:1] - INFO: scan_details_page_view opened.

    Do you see this, maybe an error?

    Then in the MCSAgent.log:

    C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsAgent.log:

    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: Received request from UI: {"authorisation":{"UI.token": "xxxx"},"action":{"SAV.scannow":"[EXTRAINFO]"}}
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: SAV scannow action does not require authentication
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: Processing action request from UI: SAV.scannow
    2021-04-21T20:56:34.872Z [ 5028:17192] [v4.13.16.0] INFO [UI] UI: AdapterActionProgress notification received from SAV for action scanProgress :: SAV scan starting

    Finally:C:\ProgramData\Sophos\Sophos Anti-Virus\logs\SAV.txt has:

    20210421 205635 Scan 'Scan my computer' started.

Children
Unfiltered HTML