This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Sophos Notification] Sophos Central Admin: Exporting events limits within Central Admin (100k limit)

Hi Community,

January 7th Update: There are two newly reported issues (500 that have been seen where you may receive a 500 or 504 error that does not have to do with the above 100,000 supported limit.

  • new 500 error - If you have an event specific to the Wireless-->"Access Point channel has been changed" event, you will not see any events show up. If you try to use one of the Export-->90 day templates, you will see the same error page shown in the screenshot above (HTTP ERROR 500)
    • To work around this issue - deselect that category type and re save the view/export. 


  • new 504 error - "api-cloudstation-us-east-2.prod.hydra.sophos.com took too long to respond"
    • Some customers with data in the US/NA region may see a 504 timeout when trying to export less than 100,000 events. This is due to the export request timing out at 60 seconds. This is normally set to 300 seconds (5 minutes).
    • Until this is resolved the only workaround for this is to reduce the amount of events you are attempting to export. You can reduce the amount of events by either selecting a smaller time frame (and combine several separate reports), or filtering out other event categories that are not needed.

This page will be updated when these two issues are resolved.

Regards,



This thread was automatically locked due to age.