The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
The reporting sub-system inserts new data into the following tables:
accounting (ulogd) auth (admin_reporter) imp2p (pfilter_reporter) ips (ips_reporter) mailsec (mailsec_reporter) pfilter (pfilter_reporter) websec_au websec_aud websec_bud (websec_reporter)
Every night, rotate_adbs.plx moves and aggregates the last days data into the _archive tables and adbs_maintenance.plx removes old data (as defined in /etc/adbs_maintenance.conf, Webadmin Reporting | Settings).
The _data views combine each table with it's _archive counterpart, in order to get all the data into one query for all reporting-related tasks. The view mailsec_addresses and mailsec_contacts give easy access to the relations needed for the extended mailsecurity reporting.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.