I have this even every 5 minutes in applog.log
Feb 14 07:51:37 function:hbtrust_response - call c_rehash on /conf/sysfiles/heartbeatd/ca-certificates
Is that normal?
Do you have a Connection to Central?
I guess this is one of the Log entries, which are not hidden at the moment for applog.
Because this Log entry is checking for the current certificates between XG and Central (Hbtrust = Heartbeat Trust).
Yes I am using Sophos Central reporting