Hello,
We have a Sophos Central account with about 150 computers and 25 servers. XDR is used. The licences have currently been active for about 8 days, but no detections have been displayed so far. Could it be that nothing has been detected so far and therefore no detections are displayed or what could be the reason for this?
Thank you!
Hello, admin_idl
We appreciate your reaching out to the Sophos Community Forum.
I suggest you check the option upload to the Data lake to ensure it’s turned on. If not, I suggest you turn on that option. It must be turned on to upload the data in datalake. Due to this, you might see no detection on the dashboard.
Note: Data Lake uploads are turned off by default so customers can decide which devices to exclude before turning them on. In a large environment, customers might experience a sudden increase in network traffic if the uploads are turned on by default.
Please refer to this article for more information:docs.sophos.com/.../index.html
Let me know if you need any further help.
Regards,
Hello,
If you are looking to test if the detections are triggered or not then, you can try it with the EICAR files, as these are specific files just to test the AV product and will not do any harm on your systems.
Furthermore, these files will also create detections and will be cleaned automatically by the Sophos Endpoint. I hope this helps in answering your query.
Best Regards,
