Sophos SPL AVScanner exit codes

Thank you for reaching out to the community forum. You may refer to this article for SLP logs.

Let us know if this answers your question. 

You can use eicar to test avscanner detecting a threat:

https://docs.sophos.com/central/customer/help/en-us/PeopleAndDevices/ProtectDevices/ServerProtection/SophosProtectionLinux/ServerProtectionAgentTestDetectionFeatures/index.html

Exit codes are listed on:

https://docs.sophos.com/central/customer/help/en-us/PeopleAndDevices/ProtectDevices/ServerProtection/SophosProtectionLinux/ServerProtectionAgent/index.html#on-demand-scan-return-codes

In particular 24 is the exit code when a threat is found, but any non-zero exit code means something went wrong, so the file may not have been scanned and found clean.

Thanks DouglasLeeder, that's exactly what I was looking for.