Sophos Endpoint

Discussions Checking machines are uploading to Data Lake

Sophos Endpoint requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 3 replies
Answers 1 answer
Subscribers 15 subscribers
Views 1448 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Checking machines are uploading to Data Lake

David Wood over 3 years ago

Hi,

I've enabled Data Lake uploads in Global Settings for both Endpoints & Servers a few days ago.

Is there a log on the client where I can check if the uploads are happening or if there is an error somewhere ?

Thanks

This thread was automatically locked due to age.

Top Replies

GlennSen over 3 years ago +1 suggested

Hi, Thank you for reaching us. For further information about live discover, you may refer to this documentation. docs.sophos.com/.../LiveResponse.html.

0 GlennSen over 3 years ago

Hi,

Thank you for reaching us. For further information about live discover, you may refer to this documentation. docs.sophos.com/.../LiveResponse.html.

Glenn ArchieSeñas (GlennSen)

Global Community Support Engineer

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up +1 Vote Down

Cancel
0 David Wood over 3 years ago in reply to GlennSen

Hi,

The question was really is there a log on the client that I can check to make sure that it is uploading to the data lake successfully not related to Live Response.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User930 over 3 years ago in reply to David Wood

I guess the MCS Client log file under: C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\

E.g.

2021-07-22T18:35:02.396Z [27216:13672] [v4.14.203.0] INFO Feed channel scheduled_query: uploading file C:\ProgramData\Sophos\Management Communications System\Endpoint\Channels\LiveQueryScheduled\Incoming\scheduled-20210722183457.json result 0 purge false

If there are json files building up in:

C:\ProgramData\Sophos\Management Communications System\Endpoint\Channels\LiveQueryScheduled\Incoming\

There could be an issue.
Cancel
Vote Up 0 Vote Down

Cancel