This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Live Log crashing

karnalta 9 months ago

Hi guys,

I realized since a few days that I could not have access to my live logs anymore.

I have the following a popup message :

Can't use string ("0") as a HASH ref while "strict refs" in use at /wfe/asg/modules/asg_logging.pm line 2260.

I am using a SG115 model.

What should I do ?

Thank you.

This thread was automatically locked due to age.

Top Replies

Vivek Jagad 9 months ago in reply to karnalta +1 verified

lastly then - Re-image UTM

Parents

0 Vivek Jagad 9 months ago
Hello karnalta ,

Thank you for reaching out to the community, please follow the following steps if it helps:

Enable the APTP pattern download on WEB-GUI
i) On "Advanced Protection"/"Advanced Threat Protection"/"Global"
ii) Enable "Advanced Threat Protection Status"
iii) Apply
Note: This will enable APTP up2date pattern download
iv) Wait for 30 minutes
v) Try the live logging again

Disable the APTP by disable the "Advanced Threat Protection Status"
Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 karnalta 9 months ago in reply to Vivek Jagad

Hello,

I tried but it did not work. I have waited about 1 hour.

Anything else I could try ?

Thank for the help.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to karnalta

Since when are you facing this problem, did you upgrade or firewall had a power outage or anything similar ?
And also can you check if the device has the enough space ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 karnalta 9 months ago in reply to Vivek Jagad

I am not certain of the date of this issue. I have noticed it a few days back but could be there for weeks. A power outage is something we experiment sometime, yes.

I have cleared all logs at first to ensure there is enough space. So yes, there is 90% of the free space.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to karnalta

And since how many days the UTM is up and running the uptime ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad 9 months ago in reply to karnalta

And since how many days the UTM is up and running the uptime ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 karnalta 9 months ago in reply to Vivek Jagad

It was up since approx. 28 days.

I just restarted it during launch time today but issue is still present.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to karnalta

Check the postgres: ps aux | grep postgres
And you can re-building the database from the command mentioned here - Database Rebuild

Impact: You'll loose the logging reporting for last 24 hours !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 karnalta 9 months ago in reply to Vivek Jagad

Just did a rebuild and unfortunately, issue still there.
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vivek Jagad 9 months ago in reply to karnalta

lastly then - Re-image UTM

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 karnalta 9 months ago in reply to Vivek Jagad

I finally re-imaged the UTM and of course, logs are now working correctly. Thank you.
Cancel
Vote Up 0 Vote Down

Cancel