Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update. Please follow knowledge base article 133945
Learn about the Benefits of Multi-Factor Authentication (MFA). Turn your MFA on now!
We'd love to hear about it! Click here to go to the product suggestion community
We had an issue with the UTM (SG330) logs filling up. We ended up deleting some old logs to clear the space. Since then, we can't see any admin changes being logged on the gui ie last 20 admin logins.
We also get this when clicking on the network protection tab:
Can't use an undefined value as a HASH reference at /wfe/asg/modules/asg_dashboard.pm line 3985
This could be an indication of a misconfiguration, Louis. Which logs are causing the problems?
It might be a coincidence, but it sounds like your deletion method might have damaged reporting, so you might need to re-initialize your PostgreSQL databases. You're in the USA, so I would get Sophos Support involved.
Cheers - Bob
In reply to BAlfson:
sorted it out now. There are a few posts on here that are related to it but the cause was the data disk/log disk filling up. I didn't have time to find out why as we had to get the system back to normal asap. It was still functioning as it was a SG330 cluster in active/standby.
Steps I took was to delete old core dumps and to delete some of the larger log files too.
I also noticed that the HA wasn't talking to each other correctly and no matter what I tried, they wouldn't talk to each other. So I disolved the cluster and then recreated it.
All is well now.
PS I'm in the UK... but keep it quiet lol!!