I've enabled Data Lake uploads in Global Settings for both Endpoints & Servers a few days ago.
Is there a log on the client where I can check if the uploads are happening or if there is an error somewhere ?
Thank you for reaching us. For further information about live discover, you may refer to this documentation. docs.sophos.com/.../LiveResponse.html.
The question was really is there a log on the client that I can check to make sure that it is uploading to the data lake successfully not related to Live Response.
I guess the MCS Client log file under: C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\
2021-07-22T18:35:02.396Z [27216:13672] [v220.127.116.11] INFO Feed channel scheduled_query: uploading file C:\ProgramData\Sophos\Management Communications System\Endpoint\Channels\LiveQueryScheduled\Incoming\scheduled-20210722183457.json result 0 purge false
If there are json files building up in:
C:\ProgramData\Sophos\Management Communications System\Endpoint\Channels\LiveQueryScheduled\Incoming\
There could be an issue.