SFOS 20.0.1 MR-1 LoggingDaemon / Garner service DEAD

Question

Hello, I logged into my Sophos XG firewall this morning and noticed that the LoggingDaemon/Garner service is dead. I tried restarting it from command line and of course it would not start. I started digging through related threads on this forum, but I have not been able to find a solution. My next step it to restart the firewall over the weekend, but if there is anything else I can do before creating a ticket it would be appreciated. Here are outputs for logs, etc.:

Added TAGs
[edited by: Raphael Alganes at 3:34 PM (GMT -8) on 17 Jan 2025]

BrucekConvergent · Answer

I've had this exact thing happen to a customers firewall cluster before. Had to contact Sophos Support; in the end it had to do with an issue with Central Registration (yes, it's counter-intuitive) and the fix ultimately was to deregister, and re-register, the cluster in Cental a couple of times to clear up the "remnants" of a broken config regarding linking up with Central. Apparently it was making Garner crash. 
 
 This may not be your issue, but it's worth trying; give the system some time between register / re-register cycles. Also I can't recall if we had to manually restart Garner afterwards or not (a reboot would do the same).