Disclaimer: This information is posted as-is and the content should be referenced at your own risk
Below are possible troubleshooting steps (and KB articles for reference) to take when you see an alert in Sophos Central that says "One or more Sophos services are missing or not running" for machines running Sophos Central Endpoint. We will also have recommendations on what information to provide to Sophos Support if none of the suggestions below work or are not applicable.
What does this alert mean?
Services missing or not running usually means that a component has failed to install or update. In some cases, the Operating System or some other third party application may interfere with Sophos services, and would cause the service(s) to not start.
What to do
For Mac OS:
For Windows OS:
Additional suggestions for troubleshooting are welcome. This post may be updated periodically.
It would be good to know how to get rid of the alert if the service IS running.
Hi Lilly Hill
Is the error showing on the central dashboard or on the endpoint? Are all the services up and running fine?
Central dashboard. And they are all running fine.
Which entries under:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\Health\Statushave a value that isn't 0?